browse
Overview
If you have Azure Sentinel as a SIEM and you wanted to ingest the Cisco Umbrella logs to it, this is the KB article that you are looking for.
Solution
To ingest Cisco Umbrella logs to Azure Sentinel via REST API, please follow the steps from the link below:
https://docs.microsoft.com/en-us/azure/sentinel/connect-cisco-umbrella