Highlighted
mahendra Absent Member.
Absent Member.
225 views

User Based Analytics(UBA) beginner doubts

I have recently setup the UBA server and was able to import users from Active directory.

I require your help to understand the following things about HPE UBA

  1. Is HPE logger required to use UBA? If no, we have Active Directory, Palo alto firewall and DLP, how to retrieve the user data from these products.
  2. How to import user activity(login, logout,  incorrect logins, password change).
  3. How to create a baseline for these activities

Thanks  in advance

Labels (2)
0 Likes
1 Reply
rejinmk Respected Contributor.
Respected Contributor.

Re: User Based Analytics(UBA) beginner doubts

Hi,

Please find the response below:-

1.HP Logger is not mandatory to use UBA. We can also use SmartConnectors or ESM to forward activity events to UBA.

2. The logs forwarded to UBA via syslog will be saved in a particular location with the source hostname or IP. Adding a new data source to access these logs saved in UBA is possible. UBA will parse the logs which are in CEF format and will take it as activity data.

3. The baseline for these activities are covered in the HP provided UBA documents.

Hope this is helpful.

Thank you,

Regards,

Rejin

0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.