# Logging Cisco Umbrella logs

**URL:** <https://discuss.elastic.co/t/logging-cisco-umbrella-logs/142129>\
**Category:** Elasticsearch\
**Created:** [July 30, 2018, 8:59am UTC](https://discuss.elastic.co/t/logging-cisco-umbrella-logs/142129 "2018-07-30T08:59:28Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![Marcos\_Felix](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/marcos_felix/32/32486_2.png) [@Marcos\_Felix](https://discuss.elastic.co/u/Marcos_Felix)\
**Post date:** [July 30, 2018, 8:59am UTC](https://discuss.elastic.co/t/logging-cisco-umbrella-logs/142129/1 "2018-07-30T08:59:29Z")

</div>

Is it possible to log cisco umbrella logs to kibana?  
If so, can someone provide me with some helpful links? Thanks

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [July 30, 2018, 9:12am UTC](https://discuss.elastic.co/t/logging-cisco-umbrella-logs/142129/2 "2018-07-30T09:12:42Z")

</div>

What is cisco umbrella and how does it log.

---

<div class="post-metadata">

**Author:** ![Marcos\_Felix](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/marcos_felix/32/32486_2.png) [@Marcos\_Felix](https://discuss.elastic.co/u/Marcos_Felix)\
**Post date:** [July 30, 2018, 10:18am UTC](https://discuss.elastic.co/t/logging-cisco-umbrella-logs/142129/3 "2018-07-30T10:18:49Z")

</div>

Essentially, Cisco umbrella is a cloud security platform.  
You have three options of logging:

- Log All Requests—For full logging, whether for content, security or otherwise
- Log Only Security Events—For security logging only, which gives your users more privacy—a good setting for people with the roaming client installed on personal devices
- Don't Log Any Requests—Disables all logging. If you select this option, most reporting for identities with this policy will not be helpful as nothing is logged to report on.

The logs are stored in a compressed (gzip) archive in CSV format. Logs are uploaded every ten minutes so there's a minimum of delay between network traffic coming from your network, being logged by Umbrella.

I don't know much more other than that.

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [July 30, 2018, 10:19am UTC](https://discuss.elastic.co/t/logging-cisco-umbrella-logs/142129/4 "2018-07-30T10:19:59Z")

</div>

Where does it upload them?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [August 27, 2018, 10:20am UTC](https://discuss.elastic.co/t/logging-cisco-umbrella-logs/142129/5 "2018-08-27T10:20:00Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
