User Guide

1-3

Cisco Advanced Web Security Reporting Installation, Setup, and User Guide

Chapter 1 Installation and Setup

System Requirements and Sizing & Scaling Recommendations

System requirements, as well as sizing and scaling recommendations, are detailed in the Advanced Web

Security Reporting Release Notes, available from

http://www.cisco.com/c/en/us/support/security/web-security-appliance/products-release-notes-list.html

Set-up Overview

Step 1 Install and Configure the Advanced Web Security Reporting Application, page 1-4

Step 2 Licensing and Migration, page 1-7

Upgrade the Advanced Web Security Reporting Application

With the release of version 4.0, with Single Installer and the architecture re-design, you must follow the

steps in this section to upgrade your version 3.0 installation for version 4.0 . Upgrading from a version

3.0 installation involves these basic steps:

• Make a back-up copy of the existing version 3.0 indexed data.

• Shut down the newly installed version 4.0 application.

• Copy the version 3.0 back-up data to the new data directory.

• Restart the version 4.0 application.

Detailed steps follow.

For these instructions, we assume that version 3.0 is running in

/opt/splunk and the new version is in

/opt/cisco_wsa_reporting. Adjust your paths accordingly.

Step 1 Stop the old version:

/opt/splunk/bin/splunk stop

Step 2 Edit the old inputs.conf file

(

/opt/splunk/etc/apps/SplunkforCiscoIronportWSA/local/inputs.conf) and disable all inputs.

Step 3 Restart the old version:

/opt/splunk/bin/splunk start

Step 4 Verify that there are no hot buckets left in the main index:

cd /opt/splunk/var/lib/splunk/defaultdb/db

Server Single-server deployments Multiple-server deployments

Transport Methods FTP (files and directories)

TCP (syslogs)

N/A

PDF Integrated PDF generation

Scheduled PDF Reporting (limited)

N/A

Component Supported Not Supported