Splunk® User Behavior Analytics Kafka Ingestion App

Splunk UBA Kafka Ingestion App

This documentation does not apply to the most recent version of Splunk® User Behavior Analytics Kafka Ingestion App. For documentation on the most recent version, go to the latest release.

Change an existing data source to use Kafka ingestion

You can change an existing data source to use Kafka ingestion. For example, if you have a large existing data source that is not using Kafka ingestion and is negatively affecting performance, you can change the data source to use Kafka ingestion to try to improve performance.

Perform the following steps to change an existing data source to use Kafka ingestion:

  1. In Splunk UBA, select Manage > Data Sources.
  2. Select the data source you want to stop, and then click Stop.
  3. Click Edit to edit the data source configuration.
  4. In the Edit Data Source window, select the Kafka Ingestion checkbox in the Connector Type field.
  5. Navigate through the remainder of the screens, and then click OK at the end to finish modifying the data source.
  6. On the data source details page, click Start to restart the data source.
Last modified on 04 August, 2022
Configure Kafka data ingestion  

This documentation applies to the following versions of Splunk® User Behavior Analytics Kafka Ingestion App: 1.3

Acrobat logo Download manual
Acrobat logo Download this page

Please expect delayed responses to documentation feedback while the team migrates content to a new system. We value your input and thank you for your patience as we work to provide you with an improved content experience!

Was this topic useful?







You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters