Install NetWitness UEBA (Cloud) with an Existing UEBA (On-premises)

Helen

June 05, 2025 03:02 Updated

Install the Cloud Link Service. For more information, see Install Cloud Link Service.
Download the Activation Package. For more information, see Download the Activation package.
Register the Cloud Link Service. For more information, see Register the Cloud Link Service.
Verify the Cloud Link Service is working. For more information, see Verify if the Cloud Link Service is working.
Enable UEBA (Cloud) data transfer by running the following command:
```
nw-manage --enable-cba
```
This command connects the UEBA (Cloud) to the Admin Server, and the data in the Users page is fetched from the UEBA (Cloud). For more information, see Transfer UEBA (Cloud) data to NetWitness platform.
Enable the UEBA (Cloud) incident rules. For more information, see Step 1. Configure Alert Sources to Display Alerts in the Respond View.