beautypg.com
i
Contents
1.Overview ··································································································································································· 1
Flow record types ······························································································································································ 1
Collecting flow records ····················································································································································· 1
Processing flow records ···················································································································································· 2
2.Quick start guide ······················································································································································ 3
UBA navigation menu ······················································································································································· 3
UBA breadcrumb navigation menu ························································································································ 3
UBA navigation tree ················································································································································· 3
Navigation tree pop-up menus ······························································································································· 5
UBA workflow ···································································································································································· 6
Flow records collection ············································································································································ 6
Device/Probe management ···································································································································· 6
Server configuration ················································································································································· 6
Audit tasks and results ············································································································································· 6
Common operations ························································································································································· 7
Navigating a list ······················································································································································· 7
Sorting a list ······························································································································································ 7
Setting the query time ·············································································································································· 8
Customizing UBA lists ·············································································································································· 9
3.Settings ···································································································································································· 10
Accessing the Settings page ········································································································································· 10
Managing UBA data sources ······································································································································· 11
Managing UBA data source devices ·················································································································· 11
Managing probes·················································································································································· 15
Managing UBA servers ················································································································································· 17
Viewing the UBA server list ·································································································································· 17
Viewing UBA server details ·································································································································· 17
Modifying and deploying UBA server configuration ························································································ 18
Managing user behavior audit ····································································································································· 20
Viewing user behavior audit list ·························································································································· 20
Viewing audit results ············································································································································· 20
Managing database space ··········································································································································· 21
Viewing database usage statistics ······················································································································· 21
Viewing database space usage trend statistics ································································································· 22
Managing data export ·················································································································································· 23
Viewing the data export list ································································································································· 23
Viewing data export logs ····································································································································· 23
Modifying the data export configuration ············································································································ 24
Auditing the exported log files ····························································································································· 24
Managing applications ················································································································································· 25
Viewing the application list ·································································································································· 25
Querying applications ·········································································································································· 26
Adding an application ·········································································································································· 26
Batch importing applications ······························································································································· 28
Modifying an application ····································································································································· 28
Deleting an application ········································································································································ 29
Managing system parameters ······································································································································ 30
Managing filter strategies ············································································································································· 31
