Install Splunk User Behavior Analytics

Install Splunk UBA with assistance from Splunk Professional Services.

Note: Installing Splunk UBA on hardened operating systems is not supported.

You can install Splunk UBA in a single-server deployment or in a distributed deployment of 3, 5, 7, 10, or 20 servers. All servers must meet the system requirements. See System requirements for Splunk UBA in this manual. For a distributed deployment, review the deployment planning and scaling guide. See Plan and scale your Splunk UBA deployment in the Plan and Scale your Splunk UBA Deployment manual.

If you want to install UBA version 5.2.1 on a single Amazon Web Services instance or on several Amazon Web Services instances, follow the instructions to install version 5.2.0 and then the instructions to Upgrade a single node AMI or OVA installation of Splunk UBA or Upgrade a distributed AMI or OVA installation of Splunk UBA.