Splunk® User Behavior Analytics

Release Notes

This documentation does not apply to the most recent version of Splunk® User Behavior Analytics. For documentation on the most recent version, go to the latest release.

Fixed issues in Splunk UBA

This version of Splunk UBA fixes the following issues. If no issues are listed, none have been reported.


Date resolved Issue number Description
2023-02-03 UBA-15961 keyutils-libs = 1.5.10-6.el8 is needed by (installed) keyutils-1.5.10-6.el8.x86_64
2023-02-02 UBA-16910, UBA-16716 UnsupportedOperationException: empty.reduceLeft in BoxPatternModel
2023-02-02 UBA-16911, UBA-16292 SuspiciousEmailDetectionModel NullPointerException
2023-01-30 UBA-16774 Caspida start-all command should check/wait for all the job agents to be available before issuing the command to restart live datasources
2023-01-26 UBA-15811 Large UBA deployments hit java.lang.OutOfMemoryError due to Hypergraph based Malware Threat Detection Model
2023-01-22 UBA-16831 Entering a UBA anomaly action rule at the UI results in error of "cannot extract elements from a scalar"
2023-01-03 UBA-16492 Hadoop Upgrade creates large backup folders. Need to finalize upgrade.
2022-12-16 UBA-16555 Assets Cache Update Query Does Not Support Multi-values Data and Causes Postgres Log Size Increase
2022-11-15 UBA-16424 Custom models don't run automatically in 5.1.0.X
2022-10-05 UBA-15164 Download Diagnostics "Parsers" for multi-node misses /var/log/caspida/jobexecutor*
2022-09-26 UBA-16310 failed to run: apt-mark hold zookeeper zookeeper-server redis-server redis-tools, exiting
2022-09-09 UBA-16289 7-node UBA deployment has an invalid value for system.messaging.rawdatatopic.retention.time in caspidatunables-7_node.conf
2022-09-02 UBA-16206 Problem with SSO settings EntityID and Issuer in UI
2022-08-23 UBA-16182 Troubleshooting UI page for the Hadoop Service App does not load
2022-08-12 UBA-14287, UBA-17142 Issue while deleting datasource referencing other UBA original primary cluster
2022-08-09 UBA-16004 "Class name not accepted" java.io.InvalidClassException when starting a Splunk connector data source and Splunk defined Source Type
2022-08-07 UBA-15871 UI will error out when trying to edit the name of an output connector without retyping the password "EVP_DecryptFinal_ex:bad decrypt"


Date resolved Issue number Description
2023-01-19 TEA-483 Spark offline model workflow in UBA 5.1 stops once one model fails
Last modified on 12 April, 2023
Known issues in Splunk UBA   Log4j in Splunk UBA 5.2.0

This documentation applies to the following versions of Splunk® User Behavior Analytics: 5.2.0


Was this topic useful?







You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters