Configure Cisco Umbrella to communicate with QRadar

IBM QRadar collects Cisco Umbrella events from an Amazon S3 bucket. You must configure your Cisco Umbrella to forward events to QRadar.

To configure Cisco Umbrella, see Cisco documentation (https://support.umbrella.com/hc/en-us/articles/231248488-Configuring-QRadar-for-use-with-Cisco-Umbrella-Log-Management-in-AWS-S3).

Important: You must have an Endpoint URL to configure a Cisco managed AWS S3 bucket and a customer managed AWS S3 bucket.