Cisco Cisco Web Security Appliance S690 User Guide

Accessing online Help from the Add Log Subscription page brings up detailed information about 
all settings.

Log into the Advanced Web Security Reporting application as 

admin

.

In the Advanced Web Security Reporting application: 

Choose Settings > Data inputs > Cisco CWS Logs. 

Click New.

Provide a meaningful name for this data input.

Provide the client_id, s3_key and s3_secret that have been provided from CWS. The client_id is the 
bucket ID used in CWS.

Click More settings check box and provide the time Interval in seconds at which CWS logs can be 
pulled; default is 3600.

Click Next.

A success screen is displayed.

You can navigate to Settings > Data inputs > Cisco CWS Logs to confirm the new data input entry.

(Optional) Custom Fields

Access only

%XK (Adds a web reputation threat reason.)

Retrieval Method

Select Syslog Push

Either

Hostname: IP address or host name of the 
Advanced Web Security Reporting host.

Protocol: TCP.

Facility: choose auth.

If connection between Advanced Web 
Security Reporting and WSA is lost, logs 
for that period are not available until 
connection is restored.