Fixed issues in Splunk UBA
This version of Splunk UBA fixes the following issues. If no issues are listed, none have been reported.
Date resolved | Issue number | Description |
---|---|---|
2023-02-03 | UBA-15961 | keyutils-libs = 1.5.10-6.el8 is needed by (installed) keyutils-1.5.10-6.el8.x86_64 |
2023-02-02 | UBA-16910, UBA-16716 | UnsupportedOperationException: empty.reduceLeft in BoxPatternModel |
2023-02-02 | UBA-16911, UBA-16292 | SuspiciousEmailDetectionModel NullPointerException |
2023-01-30 | UBA-16774 | Caspida start-all command should check/wait for all the job agents to be available before issuing the command to restart live datasources |
2023-01-26 | UBA-15811 | Large UBA deployments hit java.lang.OutOfMemoryError due to Hypergraph based Malware Threat Detection Model |
2023-01-22 | UBA-16831 | Entering a UBA anomaly action rule at the UI results in error of "cannot extract elements from a scalar" |
2023-01-03 | UBA-16492 | Hadoop Upgrade creates large backup folders. Need to finalize upgrade. |
2022-12-16 | UBA-16555 | Assets Cache Update Query Does Not Support Multi-values Data and Causes Postgres Log Size Increase |
2022-11-15 | UBA-16424 | Custom models don't run automatically in 5.1.0.X |
2022-10-05 | UBA-15164 | Download Diagnostics "Parsers" for multi-node misses /var/log/caspida/jobexecutor* |
2022-09-26 | UBA-16310 | failed to run: apt-mark hold zookeeper zookeeper-server redis-server redis-tools, exiting |
2022-09-09 | UBA-16289 | 7-node UBA deployment has an invalid value for system.messaging.rawdatatopic.retention.time in caspidatunables-7_node.conf |
2022-09-02 | UBA-16206 | Problem with SSO settings EntityID and Issuer in UI |
2022-08-23 | UBA-16182 | Troubleshooting UI page for the Hadoop Service App does not load |
2022-08-12 | UBA-14287, UBA-17142 | Issue while deleting datasource referencing other UBA original primary cluster |
2022-08-09 | UBA-16004 | "Class name not accepted" java.io.InvalidClassException when starting a Splunk connector data source and Splunk defined Source Type |
2022-08-07 | UBA-15871 | UI will error out when trying to edit the name of an output connector without retyping the password "EVP_DecryptFinal_ex:bad decrypt" |
Date resolved | Issue number | Description |
---|---|---|
2023-01-19 | TEA-483 | Spark offline model workflow in UBA 5.1 stops once one model fails |
Known issues in Splunk UBA | Log4j in Splunk UBA 5.2.0 |
This documentation applies to the following versions of Splunk® User Behavior Analytics: 5.2.0
Feedback submitted, thanks!