The Splunk UBA web interface is configured to time out after 30 minutes of inactivity. Edit ui.idleTimeout property in the /etc/caspida/local/conf/uba-site.properties file to set a different timeout value, or disable the timeout.

To configure the timeout value for Splunk UBA web interface, perform the following tasks:

1. Log in to the management server as the caspida user.
2. Edit the /etc/caspida/local/conf/uba-site.properties file.
3. Edit the ui.idleTimeout property and specify the desired timeout value in milliseconds. The default is 1800000 milliseconds (30 minutes). To prevent the Splunk UBA web interface from timing out, set the value to zero (0):

   ui.idleTimeout=0

4. Restart Splunk UBA:

   sudo service caspida-ui stop
   sudo service caspida-ui start