Create the SMB data source in Audit
- If you are using a Samba server, make sure that it is installed and configured for file sharing as described in Configuring a Samba server.
- InSpanVA, navigate toAudit, and then selectDevice logs.
- ClickNew Data Source, and then select.CloudSOCDatasource
- On the NewSpanVADatasource panel, select aCloudSOCinstance that is running 1.15.2.75 or later.
- SelectNetwork Fileas the source type, and selectSMBas the Type as shown in the following.

- Enter the transport information shown in the following table:
Field | Description |
|---|---|
Host | Host name or IP address of the SMB Server. |
User | The username of an SMB server user with privileges to read and download files
from the shared location. This is not necessarily the Unix or Windows username. In the
example in the section Configuring a Samba server, the username is
elastica . |
Password | The SMB server user password. |
Share Name | The alias for the shared directory. In the example in the section Configuring a Samba server, the share name is share. |