About the Splunk add-on for Splunk UBA
The Splunk add-on for Splunk UBA indexes data sent from Splunk UBA to the Splunk platform and allows you to send data from the Splunk platform to Splunk UBA.
Visible | Yes, this add-on contains a view for configuration. |
The add-on is not available as an add-on for download on Splunkbase. The add-on is installed and enabled when you install Splunk Enterprise Security. If you find that this add-on is not installed, you may need to re-run the Splunk Enterprise Security Post-Install Configuration and ensure that Splunk_TA_ueba is selected for install. See Install Splunk Enterprise Security.
NEXT Source type for the Splunk add-on for Splunk UBA |
This documentation applies to the following versions of Splunk® Add-on for Splunk UBA: 1.1.0, 1.2.0, 1.3.0
Feedback submitted, thanks!