Splunk User Behavior Analytics

Splunk User Behavior Analytics
Community Activity
aldo
Hi Splunk Community,I'm currently running a 7-node UBA deployment and encountering persistent errors with the `caspid...
by aldo New Member in Splunk User Behavior Analytics 09-01-2025
0 1
0
1
kn450
Hello Splunk Community,I am a new Splunk UBA user and I am currently trying to pull data from Splunk Enterprise into ...
by kn450 Explorer in Splunk User Behavior Analytics 08-25-2025
0 0
0
0
ehsanafter
Hey guysim trying to ingest haproxy logs in splunk uba.now my issue is that im getting eventHasNoEntities for all eve...
by ehsanafter New Member in Splunk User Behavior Analytics 07-01-2025
0 4
0
4
mld_msr
hello everyone I ran into a problem with Splunk UBA that I need help with. Thank you for guiding me.I have more than ...
by mld_msr New Member in Splunk User Behavior Analytics 11-08-2024
0 0
0
0
vr2312
As the title suggests, i am trying to onboard multiple data sources in Splunk UBA. I would like to see if there is a ...
by vr2312 Builder in Splunk User Behavior Analytics 06-03-2024
0 1
0
1
adol83
Hello Team We have a UBA 3-nodes architecture. Unfortunately, SAML authentication is required. We added the SAML xml ...
by adol83 Explorer in Splunk User Behavior Analytics 02-14-2024
0 1
0
1
archip
Hello,I unfortunately lost my webui password for admin account. What is the way to reset it ? I mean I know that on S...
by archip Engager in Splunk User Behavior Analytics 01-02-2024
0 1
0
1
Rogers
I use Splunk UBA 5.3.0 when I try to add data source with splunk direct, raw events it will be error "There was an er...
by Rogers New Member in Splunk User Behavior Analytics 11-14-2023
0 0
0
0
philwong
According to UBA document, looks like UBA's machine learning is based on on-prem Microsoft Active Directory and corre...
by philwong Explorer in Splunk User Behavior Analytics 10-17-2023
0 0
0
0
philwong
I have to change my UBA instance IP because infra change. After IP change was done, part of the UBA couldn't be broug...
by philwong Explorer in Splunk User Behavior Analytics 08-21-2023
0 2
0
2
Prad_10
tried to add all ip's (basically audio/video streaming sites) in IP whitelist in UBA for excluding uba alert for exce...
by Prad_10 New Member in Splunk User Behavior Analytics 08-17-2023
0 0
0
0
neerajs_81
Hi All,  which page in UBA shows closed threats or how can we view the threats that have been closed out ? By default...
by neerajs_81 Builder in Splunk User Behavior Analytics 08-16-2023
0 3
0
3
MangusNG
Hi, We know how to change WebUI SSL certificate to a custom one. How about the certificate used for other ports (like...
by MangusNG New Member in Splunk User Behavior Analytics 07-31-2023
0 0
0
0
Jagathishm
Hi, I have Splunk UBA for that i want to set an alert whenever p6 level incident triggered, I should receive the emai...
by Jagathishm New Member in Splunk User Behavior Analytics 05-15-2023
0 0
0
0
att35
Hi,Is there a way to find out all values that UBA can understand for a certain field? e.g. Under Cloud Storge,http://...
by att35 Builder in Splunk User Behavior Analytics 04-12-2023
0 0
0
0
Silviaglaze
I can not access splunk UBA web interface, It's on a single Linux serverand pass the precheck and setup is done , I c...
by Silviaglaze New Member in Splunk User Behavior Analytics 01-11-2023
0 0
0
0
philwong
Hi, I just installed UBA on RHEL 8.4 and started it first time. However it failed to start. Then I tried to stop-all ...
by philwong Explorer in Splunk User Behavior Analytics 12-20-2022
0 0
0
0
Jarroyo
Hi everyone could any one help me to know if splunk is able to integrate with google analytics.  Thanks in advance fo...
by Jarroyo New Member in Splunk User Behavior Analytics 11-25-2022
0 0
0
0
dezmadi
Hi,   I am running below query, however I am getting error saying relation "analytics_hca_change_indicator_event does...
by dezmadi Path Finder in Splunk User Behavior Analytics 08-26-2022
0 0
0
0
LouisT
If we are running Splunk UBA in cluster with three nodes, is there a way that we can cut off one node and push all th...
by LouisT New Member in Splunk User Behavior Analytics 08-08-2022
0 0
0
0
Jair
If I need to increase the number of UBA nodes, is it necessary to change the license?
by Jair Engager in Splunk User Behavior Analytics 04-19-2022
1 0
1
0
elauder_splunk
How to manually download the IP database and add it to Splunk User Behavior Analytics (UBA)?
by elauder_splunk Splunk Employee Splunk Employee in Splunk User Behavior Analytics 03-30-2022
1 1
1
1
snisaxena
Hi,I have created a watchlist, AWS_IPs and added IP addresses to it. Further, I have created anomaly action rule to r...
by snisaxena Loves-to-Learn in Splunk User Behavior Analytics 02-01-2022
0 0
0
0
VOISCyberSecuri
Hi Team,i have created my account on support portal with my official email address followed by all details ..but i do...
by VOISCyberSecuri New Member in Splunk User Behavior Analytics 12-02-2021
0 1
0
1
marcinx
is it possible to record user sessions? I mean a video record. and correlate it with : Windows users behaviorLinux us...
by marcinx New Member in Splunk User Behavior Analytics 10-19-2021
0 1
0
1