The Cisco Cloud Security Add-on for Splunk can be used to bring Secure Access and/or Umbrella logs into Splunk from AWS S3 (from either your own bucket or from a Cisco Managed bucket).
Build 1.0.36 introduces the following changes:
- Updates to the ZTNA and RAVPN Models (CIM mapping).
- Mechanism to handle split events.
- Bug fixes.
Docs can be found in our API documentation.