Splunk Enterprise Security

Are Splunk Enterprise Security and Splunk User Behavior Analytics (Splunk UBA) totally independent apps?

otan1010
Explorer

Hi,

Is Splunk Enterprise Security and Splunk User Behavior Analytics (Splunk UBA) totally independent apps?

Do they depend on each other in any way?

I'm looking to check out UBA, but do not want ES.

Regards

1 Solution

ChrisG
Splunk Employee
Splunk Employee

You can run Splunk User Behavior Analytics without Splunk Enterprise Security.

See the system requirements in the Splunk User Behavior Analytics Install and Upgrade Manual.

If you integrate it with Splunk Enterprise Security, you can use it to analyze Splunk events and investigate threats with those additional notable events available.

View solution in original post

ChrisG
Splunk Employee
Splunk Employee

You can run Splunk User Behavior Analytics without Splunk Enterprise Security.

See the system requirements in the Splunk User Behavior Analytics Install and Upgrade Manual.

If you integrate it with Splunk Enterprise Security, you can use it to analyze Splunk events and investigate threats with those additional notable events available.

Get Updates on the Splunk Community!

Stronger Security with Federated Search for S3, GCP SQL & Australian Threat ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...