Splunk Enterprise Security

Are Splunk Enterprise Security and Splunk User Behavior Analytics (Splunk UBA) totally independent apps?

otan1010
Explorer

Hi,

Is Splunk Enterprise Security and Splunk User Behavior Analytics (Splunk UBA) totally independent apps?

Do they depend on each other in any way?

I'm looking to check out UBA, but do not want ES.

Regards

1 Solution

ChrisG
Splunk Employee
Splunk Employee

You can run Splunk User Behavior Analytics without Splunk Enterprise Security.

See the system requirements in the Splunk User Behavior Analytics Install and Upgrade Manual.

If you integrate it with Splunk Enterprise Security, you can use it to analyze Splunk events and investigate threats with those additional notable events available.

View solution in original post

ChrisG
Splunk Employee
Splunk Employee

You can run Splunk User Behavior Analytics without Splunk Enterprise Security.

See the system requirements in the Splunk User Behavior Analytics Install and Upgrade Manual.

If you integrate it with Splunk Enterprise Security, you can use it to analyze Splunk events and investigate threats with those additional notable events available.

Get Updates on the Splunk Community!

Buttercup Games: Further Dashboarding Techniques

Hello! We are excited to kick off a new series of blogs from SplunkTrust member ITWhisperer, who demonstrates ...

Message Parsing in SOCK

Introduction This blog post is part of an ongoing series on SOCK enablement. In this blog post, I will write ...

Exploring the OpenTelemetry Collector’s Kubernetes annotation-based discovery

We’ve already explored a few topics around observability in a Kubernetes environment -- Common Failures in a ...