Umbrella logs in Cisco Threat Response

[Ravi-Perth-WA]

Hello Everyone,

I am wondering if we can push Cloud Umbrella logs into Cisco Threat Response so that when we search for a domain in threat response we see all the attempts to that domain with user details etc.

Regards

Ravi

[Ken Stieers]

Yes, but you have to add it in SecureX.

In the SecureX page, click on Integrations at the top, from there add an Umbrella module.

[Ravi-Perth-WA]

Thanks Ken, I have already done the integration in SecureX with Umbrella Reporting API. I can see data in SecureX graphs dashboard for Umbrella but when I search for a domain/URL in Cisco Threat Response, there is no data in threat response.

I have attached screenshot confirming the integration with SecureX with umbrella Reporting API