Configure Cisco Umbrella to communicate with QRadar
IBM® QRadar® collects Cisco Umbrella events from an Amazon S3 bucket. You must configure your Cisco Umbrella to forward events to QRadar.
To configure Cisco Umbrella, see Cisco documentation (https://support.umbrella.com/hc/en-us/articles/231248488-Configuring-QRadar-for-use-with-Cisco-Umbrella-Log-Management-in-AWS-S3).
Important: You must have an Endpoint URL to configure a Cisco managed AWS S3 bucket and a customer managed AWS S3 bucket.