Reports in Umbrella

[JupiterJazz007]

This might be a stupid question but 30 days the furthest the reports go back on Cisco Umbrella? I am trying to get a full year overview of everything (All blocked requests, Security blocks)

. 

[Rob Ingram]

Hi,

Using the Cisco managed AWS bucket for logging the data retention period is 30 days. Reference here.

If you need to run reports for the 1 year period you should export from AWS and ingest into your SIEM or use your own AWS bucket.

HTH