Integration with the ML app
The ML app brings with it capabilities of predictive modeling. This application requires intensive computation and works best when you use a separate App Host to host the applications. The ML app is installed after the UBA app is installed.
Important note
It is recommended that after you install UBA and configure it to import users, you install the ML app after at least 24 hours. This gives UBA enough time to create user profiles and assign risk scores.
The ML app has different models that it uses:
- Individual (Numeric) user model: This model calculates a value for a user.
- Individual (Observable) user model: This model calculates a set of attributes and their event counts.
- Peer Group model: This model is used to build a set of attributes and event counts and alert if the deviation of the user is more for the defined peer group.What we mean by deviation is the deviation in the risk score of the user. This peer group could be all the...
