Installation #
- Login into DataElicit’s portal. Download the related logscale package from Connectors/Packages tab.
- Install the logscale package into your Falcon LogScale repository.
- Download and extract cisco-umbrella.tgz into <Installation-Path>/LogConnector/connectors directory
tar -xzf cisco-umbrella.tgz
- cisco-umbrella connector directory:
/opt/LogConnector/connectors/cisco-umbrella$ ls
bin default template manifest.yaml README.md
Configuration #
- Create local directory and configure connector.conf, global.conf, secret.conf as per your requirements:
/opt/LogConnector/connectors/cisco-umbrella$ mkdir local
/opt/LogConnector/connectors/cisco-umbrella$ cd local
/opt/LogConnector/connectors/cisco-umbrella/local$ nano connector.conf
/opt/LogConnector/connectors/cisco-umbrella/local$ nano secret.conf
/opt/LogConnector/connectors/cisco-umbrella/local$ nano global.conf
/opt/LogConnector/connectors/cisco-umbrella/local$ ls
connector.conf global.conf secret.conf
Note #
Check conf specific conf.ini files in template/ directory for how to configure the conf files.
References #
https://docs.umbrella.com/deployment-umbrella/docs/log-formats-and-versioning