Installation overview for the Splunk Add-on for Cisco WSA
Install and configure this add-on on your supported platform.
- Download the add-on from Splunkbase at http://splunkbase.splunk.com/app/1747/.
- Install the add-on.
- Work with your Cisco WSA administrator to configure your Cisco WSA server to place the logs on a forwarder or single instance. Follow the Cisco WSA documentation to configure a push job.
- On the data collection node for the add-on, configure your inputs.
- If you are ingesting logs in W3C format into the Splunk platform, configure field extractions for these logs.
Hardware and software requirements for the Splunk Add-on for Cisco WSA
Install the Splunk Add-on for Cisco WSA
This documentation applies to the following versions of Splunk® Supported Add-ons: released