12-31-2019 10:17 AM
This might be a stupid question but 30 days the furthest the reports go back on Cisco Umbrella? I am trying to get a full year overview of everything (All blocked requests, Security blocks)
.
12-31-2019 10:31 AM
Hi,
Using the Cisco managed AWS bucket for logging the data retention period is 30 days. Reference here.
If you need to run reports for the 1 year period you should export from AWS and ingest into your SIEM or use your own AWS bucket.
HTH
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide
Log in to Community
