When jobs run in Splunk UBA
The jobs and processes in Splunk UBA run at various times. See the following table for details:
| Time | Frequency | Job or Process |
|---|---|---|
| 12:00AM | Daily | Anomaly Purger |
| 12:00AM | Daily | Batch models |
| 12:00AM | Weekly each Saturday | VirusTotal script |
| 2:00AM | Daily | HR data refreshed |
| 6:00AM | Daily | IDR exclusion list updates |
| N/A | Hourly, daily, or weekly from the time the data source is configured | Assets data |
| N/A | Every 5 minutes | ES Notable Events sync |
| N/A | Every 30 minutes | View Event Drilldown links |