Create the SMB data source in Audit

  1. If you are using a Samba server, make sure that it is installed and configured for file sharing as described in Configuring a Samba server.
  2. In
    SpanVA
    , navigate to
    Audit
    , and then select
    Device logs
    .
  3. Click
    New Data Source
    , and then select
    CloudSOC
    Datasource
    .
  4. On the New
    SpanVA
    Datasource panel, select a
    CloudSOC
    instance that is running 1.15.2.75 or later.
  5. Select
    Network File
    as the source type, and select
    SMB
    as the Type as shown in the following.
  6. Enter the transport information shown in the following table:
Field
Description
Host
Host name or IP address of the SMB Server.
User
The username of an SMB server user with privileges to read and download files from the shared location. This is not necessarily the Unix or Windows username. In the example in the section Configuring a Samba server, the username is
elastica
.
Password
The SMB server user password.
Share Name
The alias for the shared directory. In the example in the section Configuring a Samba server, the share name is share.