Data Source Rules Management

Role Availability Read-Only Investigator Analyst Manager

USM Anywhere enables you to manage rules for files stored in your Amazon Simple Storage Service (S3) bucket. Using a rule, USM Anywhere can match a file with a specific data source and generate the related events. If the file doesn't match with a data source, then USM Anywhere will create an event as an AlienVault Generic Data Source. See LevelBlue Generic Data Source for more information.

To open the Data Source Rules tab

  1. Go to Data Sources > Cloud Connectors to open the Cloud Connectors main page.
  2. Click the icon of the Cloud Connector for which you want to open the data source rules tab, and then select View Connector.

  3. Click the Data Source Rules tab.

    Data Source Rules Tab on the details of a cloud connector

This topic discusses these subtopics: