Cisco Cisco Web Security Appliance S690 User Guide

System requirements, as well as sizing and scaling recommendations, are detailed in the Advanced Web 
Security Reporting Release Notes, available from 

With the release of version 4.0, with Single Installer and the architecture re-design, you must follow the 
steps in this section to upgrade your version 3.0 installation for version 4.0 . Upgrading from a version 
3.0 installation involves these basic steps:

Make a back-up copy of the existing version 3.0 indexed data.

Shut down the newly installed version 4.0 application.

Copy the version 3.0 back-up data to the new data directory.

Restart the version 4.0 application.

Detailed steps follow.

For these instructions, we assume that version 3.0 is running in 

/opt/splunk

 and the new version is in 

/opt/cisco_wsa_reporting

. Adjust your paths accordingly. 

Stop the old version:

/opt/splunk/bin/splunk stop

Edit the old 

inputs.conf

 file 

(

/opt/splunk/etc/apps/SplunkforCiscoIronportWSA/local/inputs.conf

) and disable all inputs.

Restart the old version:

/opt/splunk/bin/splunk start

Verify that there are no hot buckets left in the main index:

cd /opt/splunk/var/lib/splunk/defaultdb/db

Server

Single-server deployments 

Multiple-server deployments

Transport Methods

FTP (files and directories)

TCP (syslogs)

N/A

PDF

Integrated PDF generation

Scheduled PDF Reporting (limited)

N/A