According to UBA document, looks like UBA's machine learning is based on on-prem Microsoft Active Directory and corresponding event code.  I'm wondering if UBA's capable to deal with AAD events when now many organizations have been shifted to Azure AD/Entra. ... View more

I have to change my UBA instance IP because infra change.  After IP change was done, part of the UBA couldn't be brought up again. I did health check and found it's jammed by docker sock.  Anyone has such experience how to fix it? I saw some solutions like adding user to /var/run/docker.sock permission group. But I'm curious user "caspida" is permitted to sudo ALL command already. So that's the problem? In addition, all configuration I can see is per hostname. Not sure why IP change would have problem. I'm runing single instance version 5.2 Cannot connect to the Docker daemon at unix:///var/run/docker.sock. Is the docker daemon running? ... View more

As we known, DMA is applied to indexes that configured in data model conf.  When we instruct to rebuild/refresh the data model. It will apply all related indexes. In some situations, we found that data is not synced (raw data is not null but data model is null) on a specific index. We're not clear what's the problem. But just curious if we can enforce DMA apply an index first?  ... View more

Hi, I just installed UBA on RHEL 8.4 and started it first time. However it failed to start. Then I tried to stop-all and start-all to find which service is wrong. It looks like HDBS data node is not failed, but I don't know to fix it individually. Can anyone give me a hand?   Tue Dec 20 18:57:36 CST 2022: Running: /opt/caspida/bin/Caspida start-service hive-metastore Hive tables are accessible Looking for live HDFS datanodes report: Incomplete HDFS URI, no host: hdfs://demo_uba:8020 report: Incomplete HDFS URI, no host: hdfs://demo_uba:8020 report: Incomplete HDFS URI, no host: hdfs://demo_uba:8020 report: Incomplete HDFS URI, no host: hdfs://demo_uba:8020 report: Incomplete HDFS URI, no host: hdfs://demo_uba:8020 report: Incomplete HDFS URI, no host: hdfs://demo_uba:8020 report: Incomplete HDFS URI, no host: hdfs://demo_uba:8020 report: Incomplete HDFS URI, no host: hdfs://demo_uba:8020 report: Incomplete HDFS URI, no host: hdfs://demo_uba:8020 report: Incomplete HDFS URI, no host: hdfs://demo_uba:8020 report: Incomplete HDFS URI, no host: hdfs://demo_uba:8020 report: Incomplete HDFS URI, no host: hdfs://demo_uba:8020 report: Incomplete HDFS URI, no host: hdfs://demo_uba:8020 report: Incomplete HDFS URI, no host: hdfs://demo_uba:8020 report: Incomplete HDFS URI, no host: hdfs://demo_uba:8020 report: Incomplete HDFS URI, no host: hdfs://demo_uba:8020 report: Incomplete HDFS URI, no host: hdfs://demo_uba:8020 report: Incomplete HDFS URI, no host: hdfs://demo_uba:8020 report: Incomplete HDFS URI, no host: hdfs://demo_uba:8020 report: Incomplete HDFS URI, no host: hdfs://demo_uba:8020 No HDFS datanodes found, check if the required ports are open Refer to installation instructions for the list of ports that are required to be open between the caspida cluster nodes ... View more