Install Splunk User Behavior Analytics

Install Splunk UBA with assistance from Splunk Professional Services.

CAUTION: Installing Splunk UBA on hardened operating systems is not supported.

You can install Splunk UBA in a single-server deployment or in a distributed deployment of 3, 5, 7, 10, or 20 servers. All servers must meet the system requirements. See System requirements for Splunk UBA in this manual. For a distributed deployment, see Scaling your Splunk UBA deployment in the Plan and Scale your Splunk UBA Deployment manual.

Note: AMI installation options are temporarily delayed, and expected to be available approximately 30 days following version 5.4.3 release.

Install version 5.4.3 on Linux: