Security Premium Solutions

Category Activity

	How to observe EPS for particular datasource from a Splunk UBA CLI? As the title suggests, i am trying to onboard multiple data sources in Splunk UBA. I would like to see if there is a ... by vr2312 Builder in Splunk User Behavior Analytics 06-03-2024 0 1	0	1
	UBA SAML Authentication Failing- How can I revert the authentication by using the CLI? Hello Team We have a UBA 3-nodes architecture. Unfortunately, SAML authentication is required. We added the SAML xml ... by adol83 Explorer in Splunk User Behavior Analytics 02-14-2024 0 1	0	1
	Double entry while reducing risk score of an Object in MC Hi Folks, lately MC started behaving little wired, after performing investigation whenever SOC analyst trying to redu... by vishenps Path Finder in Splunk Mission Control 02-08-2024 0 3	0	3
	Splunk ES Notables Not Flowing into Mission Control Hello,We have PROD and DEV instance that are both running Mission Control with the following versions below:PROD - ES... by kevinmabini Engager in Splunk Mission Control 02-01-2024 0 2	0	2
	How to reset admin password of Splunk UBA's webui Hello,I unfortunately lost my webui password for admin account. What is the way to reset it ? I mean I know that on S... by archip Engager in Splunk User Behavior Analytics 01-02-2024 0 1	0	1
	UBAadd data source from splunk direct error with There was an error processing your request. It has been logged (ID ...) I use Splunk UBA 5.3.0 when I try to add data source with splunk direct, raw events it will be error "There was an er... by Rogers New Member in Splunk User Behavior Analytics 11-14-2023 0 0	0	0
	Incident Overview Link to Contributing Events Removes newlines Correlation Search drilldowns that include newlines have those newlines removed when using a Mission Control Incident... by aaronmillikin New Member in Splunk Mission Control 11-01-2023 0 0	0	0
	Does UBA support Azure AD? According to UBA document, looks like UBA's machine learning is based on on-prem Microsoft Active Directory and corre... by philwong Explorer in Splunk User Behavior Analytics 10-17-2023 0 0	0	0
	Integration with existing SOAR instance When can customers with existing SOAR instances expect to get migrated from the trial MC instance? by caryc3 New Member in Splunk Mission Control 10-11-2023 0 1	0	1
	How to get SLA metrics data from Splunk Mission Control? Hi All, I am looking for a SPL query to generate the SLA metrics KPI dashboard for incidents in Splunk Mission Contro... by jibanrout Engager in Splunk Mission Control 09-08-2023 0 1	0	1
	How do i resolve this Error while setting Default SLA I am getting this error when trying to set the Default SLA on a newly installed Mission control app by Mo17 New Member in Splunk Mission Control 08-31-2023 0 0	0	0
	Why is there UBA docker problem after changing IP? I have to change my UBA instance IP because infra change. After IP change was done, part of the UBA couldn't be broug... by philwong Explorer in Splunk User Behavior Analytics 08-21-2023 0 2	0	2
	Exclude audio/video ips for excessive data transmission/ Data exfiltration in UBA tried to add all ip's (basically audio/video streaming sites) in IP whitelist in UBA for excluding uba alert for exce... by Prad_10 New Member in Splunk User Behavior Analytics 08-17-2023 0 0	0	0
	Where is the page of Closed threats in UBA? Hi All, which page in UBA shows closed threats or how can we view the threats that have been closed out ? By default... by neerajs_81 Builder in Splunk User Behavior Analytics 08-16-2023 0 3	0	3
	How to change custom SSL certificate? Hi, We know how to change WebUI SSL certificate to a custom one. How about the certificate used for other ports (like... by MangusNG New Member in Splunk User Behavior Analytics 07-31-2023 0 0	0	0
	How to set a alert for p6 incidents in Splunk UBA? Hi, I have Splunk UBA for that i want to set an alert whenever p6 level incident triggered, I should receive the emai... by Jagathishm New Member in Splunk User Behavior Analytics 05-15-2023 0 0	0	0
	Mission Control FAQs Splunk Mission Control brings order to the chaos of your security operations by enabling your SOC to detect, investi... by loriexi Splunk Employee in Splunk Mission Control 04-18-2023 0 0	0	0
	How to list all possible values UBA can use for certain fields? Hi,Is there a way to find out all values that UBA can understand for a certain field? e.g. Under Cloud Storge,http://... by att35 Builder in Splunk User Behavior Analytics 04-12-2023 0 0	0	0
	Why are hundreds of tokens generated by mission control? We're observing hundreds of tokens in the tokens page created by Mission Control, for the same couple of users. Most ... by mathieu_nbc Engager in Splunk Mission Control 03-03-2023 0 1	0	1
	Built-in SOAR instance- Do we have 100 actions per day? Hi team, I heard that MC went GA. Congratulations! So, now that this is GA, is this our perm SOAR instance and to c... by mikerennie Explorer in Splunk Mission Control 02-23-2023 0 2	0	2
	Mission Control: "Error: Data migration tasks failed to execute." Hi Team, Seeing this error when I go into the Mission Control App. Any ideas?Thanks,Mike by mikerennie Explorer in Splunk Mission Control 02-23-2023 0 2	0	2
	Can not access splunk UBA web interface (single linux server) I can not access splunk UBA web interface, It's on a single Linux serverand pass the precheck and setup is done , I c... by Silviaglaze New Member in Splunk User Behavior Analytics 01-11-2023 0 0	0	0
	How to fix UBA No HDFS datanodes found? Hi, I just installed UBA on RHEL 8.4 and started it first time. However it failed to start. Then I tried to stop-all ... by philwong Explorer in Splunk User Behavior Analytics 12-20-2022 0 0	0	0
	Is there a filter or can I create one so that I can quickly see all Incidents owned by me? Is there a filter or can I create one so that I can quickly see all Incidents owned by me? by mikerennie Explorer in Splunk Mission Control 12-15-2022 0 2	0	2
	Mission Control: Can you send Incidents to another ticketing system such as ServiceNow or Jira? Mission Control: Can you send Incidents to another ticketing system such as ServiceNow or Jira? by mikerennie Explorer in Splunk Mission Control 12-15-2022 0 2	0	2