Cisco Cisco Web Security Appliance S670 Guida Utente

Stop the old version again: 

/opt/splunk/bin/splunk stop

Verify that the new version is not running:

/opt/cisco_wsa_reporting/bin/splunk stop

Clean the indexes folders of the new version:

cd /opt/cisco_wsa_reporting/var/lib/splunk

rm -rf *

Copy indexes from old version to new version:

cd /opt/cisco_wsa_reporting/var/lib/splunk

cp -r /opt/splunk/var/lib/splunk/defaultdb .

cp -r /opt/splunk/var/lib/splunk/fishbucket .

Start the new version of Advanced Web Security Reporting:

/opt/cisco_wsa_reporting/bin/splunk start

In a browser, open 

http://<wsa_reporting_server_host_name>:8888

 and log in with the user name 

admin

 and password 

Splunk@dmin

.

On the application home page, click Cisco WSA - Advanced Reporting (left sidebar) to navigate to that 
App; verify that data exists (change the time frame if necessary).

Rebuild the Data Model accelerations: 

Return the Advanced Web Security Reporting home page, and then select Settings > Data Models.

One at a time, for both the SOCKS Access Model and the Web Access Model:

Click the arrow preceding the Data Model label to expand that model entry.

Click Rebuild under Acceleration.

In both cases, the rebuild process could take some time.

To run version 4.5 of the Advanced Web Security Reporting application, you simply upgrade a 
version 4.0 installation by adding a file to the existing installation, as described in 

. (Upgrading from a version 3.0 installation is a two-step process, as 

described in