Cisco Cisco Web Security Appliance S170 설치 가이드
1-12
Cisco Web Security Appliance Advanced Reporting Installation, Setup, and User Guide
Chapter 1 Installation and Setup
(Optional) Set Up Scheduled PDF Reporting
•
Splunk version 6.1.4: Select Settings > Access controls > Roles.
•
Splunk version 5.0.10: Select Manager > Access controls > Roles.
Step 2
Click New or edit an existing role.
Step 3
Define search restrictions for the role.
Example: To restrict a role to viewing data for the Sales Department, in the Restrict search terms field,
type “department=sales”.
type “department=sales”.
Step 4
Click Save.
Troubleshooting Department Membership Reporting
Tip
•
Linux users: Verify that ldapsearch tool is in the Splunk user’s path.
•
Verify that the departments.csv file exists in the application’s lookup folder.
•
Windows users: Comment out “option explicit” to reveal more specific information the origin and
and cause of an error.
and cause of an error.
•
Verify the LDAP paths are syntactically correct.
•
Verify the bind service account name is correct.
•
Verify the correct bind password is entered.
•
Test connection to the remote machine over port 389.
•
Verify the correct attribute was configured for the member name.
•
Verify the correct attribute was used for group membership.
•
Verify the correct attribute was configured for group name.
(Optional) Set Up Scheduled PDF Reporting
Splunk Web users can generate a scheduled PDF output from any dashboard, view, search or report.
Requirements
Scheduled PDF reporting requires a Linux-based instance of Splunk running on the network. For a
minimal installation. However, a standard Linux image with an installation of Splunk configured as a
forwarder (no indexing or web interface required) can serve multiple Splunk instances for PDF
generation.
minimal installation. However, a standard Linux image with an installation of Splunk configured as a
forwarder (no indexing or web interface required) can serve multiple Splunk instances for PDF
generation.
Step 1
Download and install the PDF Report Server add-on from Splunk into a Splunk instance on a single
Linux host:
Linux host:
http://splunk-base.splunk.com/apps/22348/pdf-report-server-install-on-linux-only
Step 2
Ensure that the Xvfb X server, xauth and fonts for your Linux distribution are installed. These are
included with most Linux distributions, but not installed by default. On Red Hat, type:
included with most Linux distributions, but not installed by default. On Red Hat, type:
yum install Xvfb xauth bitstream-vera-fonts