All Apps and Add-ons

Splunk UBA Installation?

kiran331
Builder

Hi Whats the difference in Installing a Splunk UBA on single server and Multiple servers?Whats the best practice?

0 Karma
1 Solution

David
Splunk Employee
Splunk Employee

Hi Kiran,

At a basic level, it's about the sizing that you need. You can check out sizing on our public docs: http://docs.splunk.com/Documentation/UBA/3.2.0/Install/DeploymentArchitecture.

As far as the actual install process, it's pretty similar. You have to set up and IP multiple systems, obviously, but during the actual install on the primary node you'll give it the IPs or DNS Names of the other nodes, and it will run through everything.

All that's also in our docs, but we'd be happy to talk in more depth about the setup and the specifics of your environment. Just respond back here and let me know, and I can reach out offline (or of course ask your account team, and they can connect us).

-David

View solution in original post

David
Splunk Employee
Splunk Employee

Hi Kiran,

At a basic level, it's about the sizing that you need. You can check out sizing on our public docs: http://docs.splunk.com/Documentation/UBA/3.2.0/Install/DeploymentArchitecture.

As far as the actual install process, it's pretty similar. You have to set up and IP multiple systems, obviously, but during the actual install on the primary node you'll give it the IPs or DNS Names of the other nodes, and it will run through everything.

All that's also in our docs, but we'd be happy to talk in more depth about the setup and the specifics of your environment. Just respond back here and let me know, and I can reach out offline (or of course ask your account team, and they can connect us).

-David

kiran331
Builder

Hi David, UBA is already deployed in our environment on a single Ubuntu VM. But were having issues in running UBA, so I just want to install a new setup.

0 Karma
Get Updates on the Splunk Community!

.conf25 Community Recap

Hello Splunkers, And just like that, .conf25 is in the books! What an incredible few days — full of learning, ...

Splunk App Developers | .conf25 Recap & What’s Next

If you stopped by the Builder Bar at .conf25 this year, thank you! The retro tech beer garden vibes were ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...