Splunk® User Behavior Analytics

Administer Splunk User Behavior Analytics

When jobs run in Splunk UBA

The jobs and processes in Splunk UBA run at various times. See the following table for details:

Time Frequency Job or Process
12:00AM Daily Anomaly Purger
12:00AM Daily Batch models
12:00AM Weekly each Saturday VirusTotal script
2:00AM Daily HR data refreshed
6:00AM Daily IDR exclusion list updates
N/A Hourly, daily, or weekly from the time the data source is configured Assets data
N/A Every 5 minutes ES Notable Events sync
N/A Every 30 minutes View Event Drilldown links
Last modified on 13 December, 2023
Manage Splunk UBA configuration properties in the uba-site.properties file   Where services run in Splunk UBA

This documentation applies to the following versions of Splunk® User Behavior Analytics: 5.0.0, 5.0.1, 5.0.2, 5.0.3, 5.0.4, 5.0.4.1, 5.0.5, 5.0.5.1, 5.1.0, 5.1.0.1, 5.2.0, 5.2.1, 5.3.0, 5.4.0, 5.4.1

Acrobat logo Download manual
Acrobat logo Download this page

Was this topic useful?







You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters