Splunk User Behavior Analytics

Splunk UBA and support for windows event log in native language

grodaas
Explorer

Does the "Windows Event Log(Multiline)"  data source in UBA support event logs in native language(non English). For example Norwegian? If it is not supported how can we add this data to UBA?

 

Labels (1)
0 Karma

lakshman239
Influencer

@grodaas I don't think non-english is supported. However, Windows event logs in XML format is supported (will be in english by default). If you need local language support, please raise with your account team and/or raise an enhancement support/request case.

grodaas
Explorer

I will try the xml solution and report back

0 Karma
Get Updates on the Splunk Community!

Splunk Observability Synthetic Monitoring - Resolved Incident on Detector Alerts

We’ve discovered a bug that affected the auto-clear of Synthetic Detectors in the Splunk Synthetic Monitoring ...

Video | Tom’s Smartness Journey Continues

Remember Splunk Community member Tom Kopchak? If you caught the first episode of our Smartness interview ...

3-2-1 Go! How Fast Can You Debug Microservices with Observability Cloud?

3-2-1 Go! How Fast Can You Debug Microservices with Observability Cloud? Learn how unique features like ...