Skip to main content

Cisco Umbrella (OpenDNS)

No application template

Cisco Umbrella has no application template. Umbrella writes to a Cisco-managed S3 bucket, which is read through an AWS S3 Bucket integration on Platform → Integrations. See the Integration Matrix for which products use which path.

Fluency supports ingress from Cisco Umbrella via an AWS S3 bucket intermediary. The S3 bucket can be your own, or one that is provided by Cisco. For this integration, Fluency assumes that you are using a Cisco provided/managed bucket.

Cisco Configurations​

Cisco supports event logging to a "Cisco-managed S3 Bucket". Follow the instructions from the link below to activate this feature from Cisco:

https://docs.umbrella.com/deployment-umbrella/docs/cisco-managed-s3-bucket

Fluency will need the following information from the process above:

  • Data Path
  • Access Key
  • Secret Key

Fluency Integration Configuration​

Login to your Fluency instance, and head to the Integrations page under the Platform menu in the navigation bar.

Navigation bar with the Platform menu open on the Integrations option

On the Integrations page, go to the New Integration view and click the AWS S3 Bucket tile, under AWS Services.

New Integration view with the AWS S3 Bucket tile in the AWS Services card

On the left-side panel, enter the required information:

Left-side panel with the bucket, region, prefix and access key fields for the Umbrella S3 bucket

Note: The Region and Bucket values can be derived from the Data Path provided by Cisco.

For instance, if your data path is cisco-managed-ca-central-1/1234567_dd7d3dcd-000c-444f-af04-93a2e000fafd, then your Bucket would be cisco-managed-ca-central-1, and the AWS Region would be ca-central-1.

Once added, the new integration will show up under Existing Integrations.

Existing Integrations list showing the new Umbrella S3 integration