The link below has a sizing guide that talks about configuring multiple reporting servers and load balancing servers but the documentation has no information on how to configure multiple servers with specific roles (indexer, forwarder, etc).
Is there any documentation on how to design and install the AWSR with multiple servers?
If the estimated requirements for indexed data volume exceed 100 K/Users (estimate: 100 GB/day,) the server infrastructure should be adjusted.
• By adding another Advanced Web Security Reporting instance and adjusting the configuration, the new infrastructure would offer an increase in aggregate indexing and search performance (once the data is load-balanced), and an increase in storage and retention capacity.
• A dedicated forwarder server would also be added to the infrastructure and configured to monitor the WSA log files and forward the log data across multiple indexers using load balancing.
• To facilitate the implementation and configuration of an environment that exceeds 100K users, it is recommended that you engage Professional Services.
http://www.cisco.com/c/dam/en/us/td/docs/security/wsa/Advanced_Reporting/WSA_Advanced_Reporting_6/Advanced_Reporting_release_notes_6x.pdf
