How to Enable CIFS Network Share to be used for RSA Security Analytics Reporting Engine Output Actions

Issue

This guide explains how to enable CIFS Network Share on SA server to be used for Reporting Engine's Output Action.

Note: This article assume that share is CIFS. If NFS, contact RSA Support.

Resolution

Perform the following steps:

1. SSH to SA Server
2. id -u rsasoc -- Note UID
3. id -g rsasoc -- Note GID
4. mkdir /tmp/share
5. chmod 777 /tmp/share -- You need to give Write Permission to rsasoc user of Reporting Engine
6. mount.cifs // / /tmp/share -o user= ,pass= ,uid= ,gid= ,dir_mode=0777,file_mode=0777
7. ls -ltr /tmp/share
8. Now in the UI  > Reporting Engine > Config> Output Action Tab, specify the Mounted Path as /tmp/share
9. Add the following line to /etc/fstab, so that the Network Share point is mounted automatically after reboot: // / /tmp/share  cifs  user= ,pass= ,uid= ,gid= ,dir_mode=0777,file_mode=0777 0 0

Product Details

RSA Product Set: Security Analytics
RSA Product/Service Type: Security Analytics Server
RSA Version/Condition: 10.4

Summary

This guide explains how to enable CIFS Network Share on SA server server to be used for Reporting Engine's Output Action

Approval Reviewer Queue

ASOC Approval Group