Hi, I'm Luke Buckley, and welcome to this Change Auditor for Fluid File Systems overview video. In this video, we're going to showcase some of the features of Fluid File System, or FluidFS auditing, how to setup an auditing template, how to do a search, and some other options that you can explore while managing these events.
First, we're going to show you how to create an auditing template for FluidFS. After the license is applied you simply log into the Change Auditor client, and select View, and Administration. Then you select the Auditing tab on the left nav bar, and you can see FluidFS is listed under NAS devices. After highlighting FluidFS, you'll see some auditing template options appear. You can add a new one, and as you can see, we have an existing one that is preconfigured here.
So we'll select that auditing template, and select Edit. And here you can view all of the configuration options we use to set it up. Within the template set up, you'll be asked for the FluidFS cluster name, as well as specifying the specific volumes that you want to audit. After adding a volume, you can simply select it, and check off any events that you want or don't want to be audited. This allows for a fluid granular approach to auditing these events.
Within the Inclusions tab, you can actually specify a file or folder mask to choose items that you specifically want to audit. And in the Exclusions tab, you can do the same for folders and files that you want to exclude from the auditing. Then we select the agent we want to use to monitor the device. This should be installed on a machine that has not only access to the device, but also the Change Auditor Coordinator as well. After confirming that information, you click Finish, and your auditing template for FluidFS is complete.
After some events have been generated by the Change Auditor agents, you can use the Searches tab and utilize the FluidFS events search, or even create your own custom FluidFS events search. To view all FluidFS events, we simply select All Events and All FluidFS events and run that search. In here, we can see several past events that were created. And as with most Change Auditor events, you simply select the event you want to look at and more details are displayed below.
You can easily create filters like an event filter by clicking the event column header and dragging it here. And you are presented with a collapsed view of each event type and you can expand on the events that interest you. And when you find those events, simply click on it to view more information. You can also view these events in a timeline view in the Change Auditor web client. Once logged in, it's as easy as selecting the searches view in the left nav bar, and searching for all FluidFS events, for example.
Here you're presented with the generic search results view, just like the regular Change Auditor client, but there is a timeline option in the top nav bar. This activates a timeline style view so you can visualize the types of events that are occurring over a long period of time. These events will be grouped by nodes, kind of like this one, where you can click and expand it and view the information about these events in more detail, while still remaining in that timeline view. When you find the events you're looking for, you simply click on the link, and it takes you straight to the event details in the search view.
I hope you enjoyed this Change Auditor for FluidFS general overview, and I'd like to thank you for watching. To learn more about Change Auditor or to obtain a free trial, please visit us online.