To add a new traffic flow for the Data Connector, do the following:
- Log in to the Cloud Services Portal.
- Go to Integrations > Data Connector.
- In the Traffic Flow Configuration tab, click Create.
- Complete the following sections of the Create New Data Configuration wizard:
- General
in the General pane, specify the following:- Name: Enter a name for this configuration.
- Description: Enter a description to distinguish this Data Connector from other flows. The maximum length of the description is 256 characters.
- State: Use the slider to enable or disable this configuration. When the configuration is disabled, traffic does not flow.
- Tags: Click Add and specify a key-value pair to associate with the application:
KEY: Enter a meaningful name for the key, such as a location or department.
VALUE: Enter a value for that key. For more information, see Managing Tags.
- Log Source Configuration
In the Log Source Configuration pane, specify the following:- Source: Select a source from among the available source options in the list of sources or click the Add icon to create a new source. For information on adding a new traffic flow data configuration source, see Adding a New Traffic Flow Source. Click Select to add the source to the configuration.
- Source Configuration: Click Add Log Type to add a log type from among the available options; Audit Log, DDI DHCP Lease Log, DDI Query/Response Log, Internal Notifications, Service Log, Threat Defense Query/Response Log, and Threat Defence Threat Feeds Hit Log.
Image: The Add Log Type options. - Filters: Specify ETL Configurations by adding an ETL filter configuration in the text field.
- Click Next to continue.
- Destination Configuration
In the Destination Configuration pane, select a destination from among the available destination options in the list of sources destinations or click the Add icon to create a new destination. Click Select to add the destination to the configuration. - Click Next to continue. For information on adding a new traffic flow data configuration destination, see Adding a New Traffic Flow Destination.
- Service Instance
In the Service instance pane, select a service instance from among the available options in on the list of service instances. - Summary:
- Name: Enter a name for this configuration.
- Description: Enter a description to distinguish this Data Connector from other hostsservices. The maximum length of the description is 256 characters.
- State: Use the slider to enable or disable this configuration. When the configuration is disabled, traffic does not flow.
- Tags: Click Add and specify a key-value pair to associate with the application:
KEY: Enter a meaningful name for the key, such as a location or department.
VALUE: Enter a value for that key. For more information, see Managing Tags.
In the Service Instance pane, specify the following:- Name: Enter a name for this configuration.
- Description: Enter a description to distinguish this Data Connector from other hosts. The maximum length of the description is 256 characters.
- State: Use the slider to enable or disable this configuration. When the configuration is disabled, traffic does not flow.
- Tags: Click Add and specify a key-value pair to associate with the traffic flow:
KEY: Enter a meaningful name for the key, such as a location or department.
VALUE: Enter a value for that key. For more information, see Managing Tags.
- Summary
Use the Summary page to do the following:
Review the details of your new traffic flow instance before saving it.
Modify a specific configuration: Click the respective section in the navigation on the left, or click Back to go back to the previous sections.
View detailed information for a specific section. For example, Click Save & Close to save your configuration, or click Cancel to discard all the changes you have made.