Install Splunk User Behavior Analytics

Install Splunk UBA with assistance from Splunk Professional Services.

CAUTION: Installing Splunk UBA on hardened operating systems is not supported.

You can install Splunk UBA in a single-server deployment or in a distributed deployment of 3, 5, 7, 10, or 20 servers. All servers must meet the system requirements. See System requirements for Splunk UBA in this manual. For a distributed deployment, see Scaling your Splunk UBA deployment in the Plan and Scale your Splunk UBA Deployment manual.

Install version 5.4.2 on Linux:

If you want to install UBA version 5.4.2 on a single Amazon Web Services instance or on several Amazon Web Services instances, follow the instructions to install version 5.4.0, then follow the instructions to upgrade to version 5.4.1, and then follow the instructions to upgrade to version 5.4.2.

Install version 5.4.0:

Upgrade to version 5.4.1:

Upgrade to version 5.4.2: