> ## Documentation Index
> Fetch the complete documentation index at: https://docs.wirespeed.co/llms.txt
> Use this file to discover all available pages before exploring further.

# Cisco Umbrella

> Ingest DNS records from Cisco Umbrella

View Cisco's documentation for configuring this integration [here](https://docs.umbrella.com/deployment-umbrella/docs/cisco-managed-s3-bucket), or follow the steps below:

1. Login to [Cisco Umbrella](https://login.umbrella.com/)
   1. If you are an MSSP or Service Provider, login to your Umbrella Dashboard > Customer Management > Select the customer you want to integrate
2. Select Admin > **Log Management**
3. Select **Use a Cisco-managed Amazon S3 bucket**
   1. Set **data retention** to **7 days**
   2. Set **region** to **us-west-1**
4. Save the data path and AWS keys
5. In Wirespeed, navigate to Integrations > [Add Integration](https://app.wirespeed.co/settings/integrations?tab=browse) > Cisco Umbrella and provide the information from step 4

After adding the integration, it typically takes 5-10 minutes for Cisco to start publishing data.

<Warning>Proxy logs from Cisco Umbrella are not currently supported<br /><br />Cisco publishes DNS events every 10 minutes, so there is approximately a 10 minute delay until events show up in Wirespeed.</Warning>
