# Cisco Umbrella

1. Umbrella logs are CSV formatted, compressed (gzip), and saved every ten minutes.
2. Umbrella reports are based on logged data. When the Log Management page displayed the upgrade option.

   a. Navigate to **Admin > Log Management**.

   b. Click **Upgrade**.

![](/files/-M_WpJBi5pswpURADwrW)

1. You can also configure logging so that logs are also stored to an Amazon S3 bucket either your own or one managed by Cisco.
2. By default, Umbrella saves your event data logs to Cisco's California location. however, you can change the location of the data warehouse at any time.
3. Logging to Amazon S3.
4. Give Full administrative access to Cisco Umbrella.
5. Enable Logging:-

   a. Navigate to **Admin > Log Management** and select **Use a Cisco-managed Amazon S3 bucket**.

![](/files/-M_WosbYwyttSyS6cO7d)

b. Select a **Region** and a **Retention Duration**

![](/files/-M_WowqxNbHvOSwY7Gca)

c. Click **Save** and then **Continue** to confirm your settings

![](/files/-M_Wp35K1b1CsA-A1tqd)

d. When activation is complete, the Amazon S3 Summary page appears.

![](/files/-M_Wp6OW_STCl8BCpCxB)

![](/files/-M_Wp9s9-UYjRS49jp0z)

e. Copy credentials from this page and store them in a safe place. This is the only time that the **Access** and **Secret** keys are made available to you. These keys are required to access your S3 bucket and download logs. If you lose these keys they must be regenerated.

f. Once keys are copied and safe, check **Got it** and then click **Continue**.

g. Summary page

![](/files/-M_WpCPCCNko0rnHPZgX)

h. Please share keys to BluSapphire.

Note: - if you need more information please find below link

[https://docs.umbrella.com/deployment-umbrella/docs/log-managemen](https://docs.umbrella.com/deployment-umbrella/docs/log-management)


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.blusapphire.io/log-forwarding/03_log-forwarding-guide/cloud-log-forwarding/cisco/cisco-umbrella.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.