IBM Security QRadar

UBA user coalescing unique attributes

  • 1.  UBA user coalescing unique attributes

    Posted Sun October 11, 2020 09:45 AM

    Trying to get UBA up and running / producing actionable results, and when I went into tuning for the LDAP import the user coalescing screen shows that many attributes are not unique.

    Specifically for our organization, it is showing mail, employeeid, samaccountname, userprincipalname, all as not unique, while I am under the belief that these are in fact all unique fields.

    I am curious if there's a way to find out how/why the app believes these fields are not unique.

    bryan mcclenahan