Splunk Enterprise Security

Use case to report on users who are accessing systems or data that is not within their regular usage?

vikkysplunk
Path Finder

Hi All, is any one created Use case to report on users who are accessing systems or data that is not within their regular usage?

Labels (1)
0 Karma

richgalloway
SplunkTrust
SplunkTrust

That sounds like Splunk UBA (User Behavior Analytics).  See https://www.splunk.com/en_us/software/user-behavior-analytics.html

---
If this reply helps you, Karma would be appreciated.

vikkysplunk
Path Finder

@richgalloway Hi, is there any way we can create the use case for "Use case to report on users who are accessing systems or data that is not within their regular usage profile " in splunk with out using UBA?

0 Karma

richgalloway
SplunkTrust
SplunkTrust

Is there a way?  Probably.  If it was easy, though, Splunk wouldn't have bought UBA.

---
If this reply helps you, Karma would be appreciated.
0 Karma
Get Updates on the Splunk Community!

Welcome to the Future of Data Search & Exploration

You have more data coming at you than ever before. Over the next five years, the total amount of digital data ...

What’s new on Splunk Lantern in August

This month’s Splunk Lantern update gives you the low-down on all of the articles we’ve published over the past ...

This Week's Community Digest - Splunk Community Happenings [8.3.22]

Get the latest news and updates from the Splunk Community here! News From Splunk Answers ✍️ Splunk Answers is ...