Splunk® User Behavior Analytics Monitoring App

Splunk UBA Monitoring App

Install the Splunk UBA Monitoring App

Download the Splunk UBA Monitoring App from Splunkbase.

See Apps and add-ons in the Splunk Enterprise Admin Manual for more information about Splunk apps.

Installation instructions

Install the Splunk UBA Monitoring App in a single-instance or distributed Splunk Enterprise environment. Use the following tables to determine where and how to install the Splunk UBA Monitoring App in a Splunk Enterprise deployment.

Where to install the app in a distributed deployment

Use the table to determine where to install the app in a Splunk Enterprise distributed deployment:

Splunk instance type Must the app be installed here? Comments
Search Heads Yes Install this app on the search head.
Indexers No The app does not contain indexes.
Forwarders Already included in UBA The app contains inputs for forwarder data collection.

Distributed deployment compatibility

Use the table to check the compatibility of the app with Splunk Enterprise distributed deployment features:

Distributed deployment feature Supported Comments
Search Head Clusters Yes Use the search head cluster deployer to distribute apps across search head cluster members. See Use the deployer to distribute apps and configuration updates in the Splunk Enterprise Distributed Search manual.
Indexer Clusters No The app does not contain indexes or index-time transformations.
Deployment Server No The app does not contain inputs for forwarder data collection.

Install the app using Splunk Web

  1. Log in to the Splunk Enterprise search head.
  2. On the Applications menu, scroll to the bottom and select Find More Apps.
  3. On the Browse more apps page, locate the app in the list, or type the name in the search box.
  4. Provide your splunk.com credentials.
  5. Accept the license terms.
  6. Click Login and Install.
  7. Click Done.
  8. Restart Splunk Enterprise to complete the installation.

Install the app from a downloaded file

  1. Log in to splunkbase.splunk.com.
  2. Download the Splunk UBA Monitoring App and save it to an accessible location.
  3. Log in to the Splunk Enterprise search head.
  4. On the Applications menu, select the Manage Apps (The manage apps icon) icon.
  5. On the Apps page, click Install app from file.
  6. On the Upload app page, click the Choose file button to locate the app.
  7. Click Upload.
  8. Click Done.
  9. Restart Splunk Enterprise to complete the installation.
Last modified on 12 July, 2022
Splunk UBA Monitoring App requirements   Enable Splunk UBA to forward data to the Splunk platform

This documentation applies to the following versions of Splunk® User Behavior Analytics Monitoring App: 1.0.0, 1.1, 1.1.1, 1.1.2, 1.1.3, 1.1.4


Was this topic useful?







You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters