Splunk® User Behavior Analytics

Administer Splunk User Behavior Analytics

Disable the Splunk UBA web interface timeout

The Splunk UBA web interface is configured to time out after 30 minutes of inactivity. Edit ui.idleTimeout property in the /etc/caspida/local/conf/uba-site.properties file to set a different timeout value, or disable the timeout.

To configure the timeout value for Splunk UBA web interface, perform the following tasks:

  1. Log in to the management server as the caspida user.
  2. Edit the /etc/caspida/local/conf/uba-site.properties file.
  3. Edit the ui.idleTimeout property and specify the desired timeout value in milliseconds. The default is 1800000 milliseconds (30 minutes). To prevent the Splunk UBA web interface from timing out, set the value to zero (0):
  4. Restart Splunk UBA:
    sudo service caspida-ui stop
    sudo service caspida-ui start
Last modified on 04 March, 2021
Mask personally-identifiable information in Splunk UBA   Change the password for Splunk UBA services

This documentation applies to the following versions of Splunk® User Behavior Analytics: 5.0.0, 5.0.1, 5.0.2, 5.0.3, 5.0.4,, 5.0.5,, 5.1.0,, 5.2.0, 5.2.1, 5.3.0, 5.4.0

Was this topic useful?

You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters