Splunk UBA Monitoring App
Overview
Details
The Splunk UBA Monitoring App provides a centralized solution for Splunk Enterprise users to monitor the health of Splunk UBA and investigate Splunk UBA issues directly from Splunk Enterprise.
Capabilities:
- Send UBA diagnostic logs to Splunk. All WARN and ERROR logs are sent by default
- Send UBA health monitoring indicators to Splunk
- Out-of-the box dashboards and KPIs
- Ability to create custom dashboards and KPIs
Use Cases:
- Monitor overall system health
- Troubleshoot ingestion issues
- Troubleshoot an output connector
- Monitor and troubleshoot anomaly and threat model executions
- Search UBA logs in Splunk
For information on Installation and Release Notes see: http://docs.splunk.com/Documentation/UBA
Release Notes
Version 1.1.4
Changes have been made to what anonymized data the Splunk UBA Monitoring App as deployed on Splunk Enterprise sends Splunk Inc. ("Splunk"). Version 1.1.4 of the Splunk UBA Monitoring App as deployed on Splunk Enterprise no longer collects or sends any anonymized data to Splunk Inc. ("Splunk") .
Version 1.1.3
Emit anonymized UBA telemetry to Splunk, adhering to compliance standards. It gives insights about UBA and its usage which helps in making product and engineering decision to make UBA better.