|
1 | 1 | # Cisco Umbrella Integration
|
2 | 2 |
|
3 |
| -This integration is for [Cisco Umbrella](https://docs.umbrella.com/). It includes the following |
4 |
| -datasets for receiving logs from an AWS S3 bucket using an SQS notification queue and Cisco Managed S3 bucket without SQS: |
| 3 | +## Overview |
| 4 | + |
| 5 | +This integration is for [Cisco Umbrella](https://docs.umbrella.com/). It includes the following datasets for receiving logs from an AWS S3 bucket using an SQS notification queue and Cisco Managed S3 bucket without SQS: |
5 | 6 |
|
6 | 7 | - `log` dataset: supports Cisco Umbrella logs.
|
7 | 8 |
|
8 |
| -## Setup |
| 9 | +### Compatibility |
| 10 | + |
| 11 | +This integration supports the log schema version 8 and 9. |
9 | 12 |
|
10 |
| -### Collect data from Cisco Umbrella |
| 13 | +## What do I need to use this integration? |
11 | 14 |
|
12 |
| -To start collecting logs from Cisco Umbrella, you will need to configure an S3 bucket where the logs will be exported. Depending on your setup, you can choose between a Cisco-managed or a self-managed S3 bucket. Follow the appropriate guide below to complete the setup: |
| 15 | +To start collecting logs from Cisco Umbrella, you need to configure an S3 bucket where the logs will be exported. Depending on your setup, you can choose between a Cisco-managed or a self-managed S3 bucket. |
13 | 16 |
|
14 | 17 | - For a Cisco-managed S3 bucket, follow these [step-by-step instructions](https://docs.umbrella.com/deployment-umbrella/docs/cisco-managed-s3-bucket).
|
15 | 18 |
|
16 | 19 | - For a self-managed S3 bucket, follow these [step-by-step instructions](https://docs.umbrella.com/deployment-umbrella/docs/setting-up-an-amazon-s3-bucket).
|
17 | 20 |
|
18 |
| -**Note:** Make sure to disable the `Include Optional Log Headers in S3 Export` toggle to prevent optional headers from appearing in the S3 log management report. See [reference](https://docs.umbrella.com/deployment-umbrella/docs/log-formats-and-versioning#view-your-headers). |
| 21 | +**Note:** Make sure to disable the `Include Optional Log Headers in S3 Export` toggle to prevent optional headers from appearing in the S3 log management report. Check also the [reference](https://docs.umbrella.com/deployment-umbrella/docs/log-formats-and-versioning#view-your-headers) documentation. |
19 | 22 |
|
20 | 23 | ## Logs
|
21 | 24 |
|
22 | 25 | ### Umbrella
|
23 | 26 |
|
24 |
| -When using Cisco Managed S3 buckets that does not use SQS there is no load balancing possibilities for multiple agents, a single agent should be configured to poll the S3 bucket for new and updated files, and the number of workers can be configured to scale vertically. |
| 27 | +When using Cisco Managed S3 buckets that do not use SQS, there is no load balancing for multiple agents. A single agent should be configured to poll the S3 bucket for new and updated files, and the number of workers can be configured to scale vertically. |
25 | 28 |
|
26 | 29 | The `log` dataset collects Cisco Umbrella logs.
|
27 | 30 |
|
|
0 commit comments