Cisco Cisco Web Security Appliance S170 インストールガイド

Local Splunk authentication supersedes any other authentication option configured.

Default setup:

Three roles: Define user privileges.

One user account: admin, which is permanent. Use this account to configure, test, and troubleshoot.

Add users to a splunk-specific group in the directory services.

Import that group DN into Splunk.

Either map the most appropriate default Splunk role to that group DN or create and map to a more 
appropriate role.

If your requirements are simple, for example, only a few people can view Splunk data, then using local 
authentication may be sufficient.

Install Cisco Web Security Appliance Advanced Reporting. 

Run the cleanup script (described below.) 

Import and index historical data. 

Restart Splunk. 

3.0 

2.0