View Cisco’s documentation for configuring this integration here, or follow the steps below:
- Login to Cisco Secure Access
- Select Admin > Log Management
- Navigate to Amazon S3, and then choose Use a Cisco-managed Amazon S3 bucket.
- Set Data Retention to 7 days
- Set Region to us-west-2
- Save the data path and AWS keys
- In Wirespeed, navigate to Integrations > Add Integration > Cisco Secure Access and provide the information from step 4
Cisco publishes logs every 10 minutes, so there is approximately a 10 minute delay until events show up in Wirespeed.