I’ve configured the Cisco Umbrella log source but I’m not getting any logs. We chose to go with the Cisco Managed Amazon S3 bucket. I’ve verified the S3 bucket name and S3 key prefix are correct so I know it’s not that. The only thing I’m unclear on is the credentials. I chose the IAM User option and I used an existing credential.
Has anyone had this issue and if so how did you fix it?
By the way the IAM credentials are the Access Key and Secret Key that Umbrella console shows you on screen when enabling the log management on Amazon S3 (if you forgot them, there a button to regenerate the keys).