Skip to main content
Skip table of contents

Flat File - Cisco Umbrella DNS

Device Details

Device NameCisco Umbrella DNS
Device TypeUmbrella DNS
Supported Model Name/NumberN/A
Supported Software VersionN/A
Collection MethodFlat File
Configurable Log OutputNo
Log Source TypeFlat File - Cisco Umbrella DNS
Log Processing PolicyLogRhythm Default V 2.0
Additional Information

Supported Log Messages

(List of LR tags used to parse the log information for each message type)

TypeProduct VersionSupported Schema Fields
V 2.0 : Admin Audit LogsN/A<account>, <login>, <object>, <action>, <tag1>, <sip>
V 2.0 : Cloud Firewall LogsN/A<object>, <objecttype>, <protnum>, <size>, <sip>, <sport>, <dip>, <dport>, <action>, <tag1>
V 2.0 : DLP LogsN/A<severity>, <object>, <process>, <domainorigin>, <action>, <tag1>, <policy>, <size>, <hash>
V 2.0 : DNS LogsN/A <object>, <sip>,  <action>, <tag1>, <responsecode>, <domainimpacted>, <subject>, <objecttype> 
V 2.0 : IP LogsN/A<object>, <sip>, <sport>, <dip>, <dport>, <subject>, <objecttype>
V 2.0 : IPS LogsN/A<object>, <objecttype>, <subject>, <severity>, <cve>, <protname>, <session>, <sip>, <sport>, <dip>, <dport>, <action>, <tag1>
V 2.0 : Proxy Web LogsN/A<sip>, <dip>, <action>, <tag1>, <url>, <useragent>, <responsecode>, <bytesout>, <bytesin>, <hash>, <subject>, <threatname>, <object>, <objecttype>, <status>
V 2.0 : Catch All : Level 1N/AN/A

Revision History

KB VersionLog TypeChange TypeDetails
KB 7.1.661.0Flat File-Cisco Umbrella DNSNew Log Source Optimization (LSO) policy: LogRhythm Default V 2.0Optimized new log processing policy for Flat File-Cisco Umbrella DNS
JavaScript errors detected

Please note, these errors can depend on your browser setup.

If this problem persists, please contact our support.