Hi Thomas,
UEBA will be active from the moment the customer has applied the licence and selected the Users and Entities to be monitored.
Usually, with any baselining in machine learning, it is the number of data points that build the baseline, the more data points, the quicker the baseline. We generally recommend it takes up to 30 days to achieve this on average.
Hope this helps!
1 comment