Cisco Cisco Web Security Appliance S170 Guia Da Instalação
1-13
Cisco Web Security Appliance Advanced Reporting Installation, Setup, and User Guide
Chapter 1 Installation and Setup
(Optional) Edit the List of URL Categories
Step 3
Launch Splunk Web on the Linux host.
Step 4
Do the following:
•
Splunk version 6.1.4: Select Settings > System Settings > Email Settings.
•
Splunk version 5.0.10: Select Manager > System Settings > Email Alert Settings.
Step 5
Configure mail and report server settings:
a.
Under Mail server settings, enter or update information related to the SMTP server that Splunk
interacts with in order to send out alert emails.
interacts with in order to send out alert emails.
b.
Identify the SMTP mail host server.
c.
Provide an authentication username/password if the SMTP server requires them.
d.
(Optional) Specify that Splunk uses SSL or TLS when it communicates with the SMTP server.
e.
Under Email format, configure the format of the emails that Splunk sends.
You can define the name that appears in the "sender" field (by default it is Splunk), and you can set
up the format of the email subject line (by default it is Splunk Alert: $name$, where $name$ is the
name of the search that the alert is based upon). You can also set at the Manager level the default
email format for all alerts and whether or not alert emails provide inline results.
up the format of the email subject line (by default it is Splunk Alert: $name$, where $name$ is the
name of the search that the alert is based upon). You can also set at the Manager level the default
email format for all alerts and whether or not alert emails provide inline results.
If the hostname of the Splunk Web instance that this PDF Report Server will talk to is not resolvable
in DNS, enter its IP address or a hostname that resolves to that IP in the Link hostname field. This
will ensure that Splunk Web can contact the PDF Report Server, and that links sent in emailed PDF
reports work correctly. If the field is left empty, Splunk will try to autodetect the hostname.
in DNS, enter its IP address or a hostname that resolves to that IP in the Link hostname field. This
will ensure that Splunk Web can contact the PDF Report Server, and that links sent in emailed PDF
reports work correctly. If the field is left empty, Splunk will try to autodetect the hostname.
f.
Enter the Remote PDF Report Server URL and select paper options.
g.
Click Save.
Step 6
To change the splunk core service port: From the %SPLUNK_HOME%\bin directory: splunk set
splunkd-port ####
splunkd-port ####
(Optional) Edit the List of URL Categories
Note
Do not edit the category code in the first column.
To obtain the pathname to the url_categories.csv file:
•
Splunk version 6.1.4: Select Settings > Lookups > Lookup table files
•
Splunk version 5.0.10: Select Manager > Lookups > Lookup table files
Additional Reading
•
Splunk License Installation:
http://www.splunk.com/base/Documentation/latest/Admin/Installalicense
http://www.splunk.com/base/Documentation/latest/Admin/Installalicense
•
Splunk License Violations:
http://www.splunk.com/base/Documentation/latest/Admin/Aboutlicenseviolations
http://www.splunk.com/base/Documentation/latest/Admin/Aboutlicenseviolations