Table of Contents
Advertisement
Chapter 12
Configuring Web Server Devices
Apache Web Server on Solaris or RedHat Linux
Sun Java System Web Server on Solaris
The Sun Java System Web Sever was formerly known by the following product names: Netscape
Note
Enterprise Server, iPlanet Web Server, and Sun ONE Web Server,
Generic Web Server Generic
You can add computers running Solaris or Linux to MARS as reporting devices. The computer needs to
run an opensource agent that sends web log data to MARS.
Solaris or Linux-side Configuration
Cisco provides an opensource logging agent and an associated configuration file for you to use. This
agent can be downloaded from the software download center at the following URL:
Synchronize clocks of the UNIX or Linux system and the MARS to ensure times match between them.
Note
Install and Configure the Web Agent on UNIX or Linux
For MARS to recieve logs from a webserver, you must install the Web agent, (agent.pl version 1.1) on
the target webserv and direct the agent to publish logs to the MARS Appliance.
Before you install the agent, you must have perl and curl installed on your system.
Note
To install the agent on a UNIX or Linux hosts, follow these steps:
Step 1
Log into the host as the root user.
Create a directory called /opt/webagent.
Step 2
Copy the files agent.pl and webagent.conf to the /opt/webagent directory.
Step 3
Set the protection of the agent script (agent.pl) so it can be read and executed by all:
Step 4
Edit the configuration file (weblogagent.conf):
Step 5
78-17020-01
http://www.cisco.com/cgi-bin/tablebuild.pl/cs-mars-misc
cd /opt/webagent
chmod 755 agent.pl
logfile_location = access_log_path
MARS_ip_port = MARS_ip_address
username = a
Apache Web Server on Solaris or RedHat Linux
User Guide for Cisco Security MARS Local Controller
12-7
Advertisement
Table of Contents
Troubleshooting
