About Splunk User Behavior Analytics and release types

The following types of Splunk UBA releases are available:

• Platform releases
• Content releases
• Maintenance and patch releases

Platform releases

Platform releases contain significant new features and enhancements such as new or enhanced rules, threats, or product functionality. Platform releases are identified with a zero at the end of the three-digit release number (for example, 4.3.0).

Platform releases are installed by performing the following tasks:

1. Downloading the software from the Splunk UBA Software Update page on Splunkbase.
2. Deploy the software into a new environment, or upgrade existing software by following the upgrade instructions.

You can also obtain the platform release software for Bare Metal environments from the Splunk UBA RHEL 7.x Software for Bare Metal Installation page on Splunkbase.

Content releases

Content releases consist of a longer list of fixed issues, and may also include minor product enhancements such as updates to rules or threats. Content releases are identified by a three-digit release number that does not end in a zero such as 4.3.2, which is a content update for the platform release 4.3.0.

Content releases are installed by performing the following tasks:

1. Download the software from the Splunk UBA Content Updates page on Splunkbase.
2. Install the content update using the Manage > Subscription Content page in Splunk UBA Web.

Maintenance and patch releases

Maintenance releases contain a longer list of known issues, bug fixes, and minor feature additions or enhancements. Maintenance releases are identified by a three-digit release number that does not end in a zero such as 4.3.1, which is a maintenance release for the platform release 4.3.0.

A patch release consists of up to five critical or highly urgent issues that must be addressed in a short window of time. Patch releases are identified by a four-digit release number such as 4.3.1.1, which is a patch release for Splunk UBA release 4.3.1.

Maintenance and patch releases are installed by performing the following tasks:

1. Download the software from the Splunk UBA Software Update page on Splunkbase.
2. Install the software using the CLI to execute a script.