# Cisco Umbrella

1. Umbrella logs are CSV formatted, compressed (gzip), and saved every ten minutes.
2. Umbrella reports are based on logged data. When the Log Management page displayed the upgrade option.

   a. Navigate to **Admin > Log Management**.

   b. Click **Upgrade**.

![](https://2078222076-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-MMRHZBPHlLDUc8519fX%2F-M_WjrxVagJH75ZF8W-z%2F-M_WpJBi5pswpURADwrW%2Fimage.png?alt=media\&token=a02b44a2-7844-4e70-8efd-44dbb56b6ca6)

1. You can also configure logging so that logs are also stored to an Amazon S3 bucket either your own or one managed by Cisco.
2. By default, Umbrella saves your event data logs to Cisco's California location. however, you can change the location of the data warehouse at any time.
3. Logging to Amazon S3.
4. Give Full administrative access to Cisco Umbrella.
5. Enable Logging:-

   a. Navigate to **Admin > Log Management** and select **Use a Cisco-managed Amazon S3 bucket**.

![](https://2078222076-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-MMRHZBPHlLDUc8519fX%2F-M_WjrxVagJH75ZF8W-z%2F-M_WosbYwyttSyS6cO7d%2Fimage.png?alt=media\&token=5b90ac47-19ac-4a53-9407-9ee9c801f6b5)

b. Select a **Region** and a **Retention Duration**

![](https://2078222076-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-MMRHZBPHlLDUc8519fX%2F-M_WjrxVagJH75ZF8W-z%2F-M_WowqxNbHvOSwY7Gca%2Fimage.png?alt=media\&token=61e8a274-4b4d-4b34-958a-fbeadbd0eac0)

c. Click **Save** and then **Continue** to confirm your settings

![](https://2078222076-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-MMRHZBPHlLDUc8519fX%2F-M_WjrxVagJH75ZF8W-z%2F-M_Wp35K1b1CsA-A1tqd%2Fimage.png?alt=media\&token=04cddb87-7758-40e3-b5e8-3df94068455a)

d. When activation is complete, the Amazon S3 Summary page appears.

![](https://2078222076-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-MMRHZBPHlLDUc8519fX%2F-M_WjrxVagJH75ZF8W-z%2F-M_Wp6OW_STCl8BCpCxB%2Fimage.png?alt=media\&token=feabffbd-8a66-4717-8972-f33d35600f2b)

![](https://2078222076-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-MMRHZBPHlLDUc8519fX%2F-M_WjrxVagJH75ZF8W-z%2F-M_Wp9s9-UYjRS49jp0z%2Fimage.png?alt=media\&token=e642133e-39ad-4365-b304-3f2144f0feb4)

e. Copy credentials from this page and store them in a safe place. This is the only time that the **Access** and **Secret** keys are made available to you. These keys are required to access your S3 bucket and download logs. If you lose these keys they must be regenerated.

f. Once keys are copied and safe, check **Got it** and then click **Continue**.

g. Summary page

![](https://2078222076-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-MMRHZBPHlLDUc8519fX%2F-M_WjrxVagJH75ZF8W-z%2F-M_WpCPCCNko0rnHPZgX%2Fimage.png?alt=media\&token=dc99ca70-5817-46ba-bf08-b3c402dd63bd)

h. Please share keys to BluSapphire.

Note: - if you need more information please find below link

[https://docs.umbrella.com/deployment-umbrella/docs/log-managemen](https://docs.umbrella.com/deployment-umbrella/docs/log-management)