The UEBA PreConfiguration Plugin is an application that bundles the necessary enrichment sources and enrichment policy to prepare your input logs for UEBA analysis.
UEBA builds threat models for various use cases. To prepare a proper model, it needs at least 30 days of normalized and enriched data.
This guide provides information that you need, to use the UEBA PreConfiguration Plugin for preparation of the required data. It helps you understand and perform the following tasks:
Install the UEBA PreConfiguration Plugin. Go to Installing the Application for details.
Configure the necessary enrichment sources. Go to Enrichment Sources for details.
Configure the necessary enrichment policy. Go to Enrichment Policy for details.
Add normalization and processing policies. Go to Adding a Normalization Policy and Adding a Processing Policy for details.
Uninstall the UEBA PreConfiguration Plugin. Go to Uninstalling the UEBA PreConfiguration Plugin for details.