Splunk User Behavior Analytics

Splunk UBA and support for windows event log in native language

grodaas
Explorer

Does the "Windows Event Log(Multiline)"  data source in UBA support event logs in native language(non English). For example Norwegian? If it is not supported how can we add this data to UBA?

 

Labels (1)
0 Karma

lakshman239
SplunkTrust
SplunkTrust

@grodaas I don't think non-english is supported. However, Windows event logs in XML format is supported (will be in english by default). If you need local language support, please raise with your account team and/or raise an enhancement support/request case.

grodaas
Explorer

I will try the xml solution and report back

0 Karma
Get Updates on the Splunk Community!

Improve Your Security Posture

Watch NowImprove Your Security PostureCustomers are at the center of everything we do at Splunk and security ...

Maximize the Value from Microsoft Defender with Splunk

 Watch NowJoin Splunk and Sens Consulting for this Security Edition Tech TalkWho should attend:  Security ...

This Week's Community Digest - Splunk Community Happenings [6.27.22]

Get the latest news and updates from the Splunk Community here! News From Splunk Answers ✍️ Splunk Answers is ...