Configure Cisco SSE to communicate with QRadar

IBM QRadar collects Cisco SSE events from an Amazon S3 bucket. You must configure your Cisco SSE to forward events to QRadar.

To configure Cisco SSE, see Cisco documentation (https://support.umbrella.com/hc/en-us/articles/231248488-Configuring-QRadar-for-use-with-Cisco-Umbrella-Log-Management-in-AWS-S3).

Important: You must have an Endpoint URL to configure a Cisco managed AWS S3 bucket and a customer managed AWS S3 bucket.