User Behavior Analytics (UBA)
Getting Started with QRadar User Behavior Analytics
This roadmap outlines fundamental courses intended for someone who works with IBM QRadar User Behavior Analytics (UBA). These courses describe UBA architecture, review installation, and help you to deploy and use the UBA application.
Review the following courses to learn about UBA concepts and architecture, and become familiar with the user interface.
Study the following courses to become familiar with the UBA installation and how to start using the application.
In the following courses you learn about various use cases and how a Security Analyst can use UBA for user behavior investigations.
The User Behavior Analytics (UBA) app starting version 3.6.0 supports multitenant environments in IBM Security QRadar 7.4.0 Fix Pack 1 and later. Multitenant environments allow Managed Security Service Providers (MSSPs) and multidivisional organizations to provide security services to multiple client organizations from a single, shared QRadar deployment. You don't need to deploy a unique QRadar instance for each customer. With QRadar 7.4.0 Fix Pack 1 or later and UBA 3.6.0, you can create multiple tenants from a single deployment instead of managing multiple deployments. The course walks you through all concepts that are needed to set up the UBA app in a multitenant environment such as log sources, tenants, domains, security profiles, UBA users, and roles.