Troubleshooting the UEBA Content App for Cloud

Solutions to common issues with the UEBA Content App for Cloud

Detections are enabled but producing no anomaly findings

Symptom: Network traffic data is flowing but no risk events appear in Enterprise Security.

Resolution:

  1. Confirm that the correct transformation is active.
  2. Confirm that relevant detections are enabled in Enterprise Security > Content Management.
  3. Validate the default mapping for the UEBA dataset or clone and update it to adjust to your environment.

  4. Identify the detection field requirements from Manage UEBA datasets.