The Umbrella Documentation Hub

Welcome to the Umbrella documentation hub. Here you'll find access to all of our Cisco Umbrella user guides.

Get Started    

Report Retention

The reporting of information begins as soon as you start sending traffic to Umbrella.

The following reports are available for one calendar year:

  • Total Requests
  • Top Destinations
  • Top Categories
  • Top Identities

Activity Volume is retained for one calendar year.

You can review and filter reported data on various timelines. Timelines vary depending on the report, from the last hour to the last thirty days, and in some cases, custom date ranges in increments of time—up to 30 or 90 days—going back one year.

The following reports are limited to a 30-day search window:

  • Top Domains
  • Total Requests
  • Security Activity
  • Activity Search
    Note: *Umbrella does not retain Security Activity or Activity Search data for more than 30 days.

Admin Audit log Retention

The Admin Audit log retains data for one year. You can access data in three-month increments. For more information, see the Admin Audit Log Report.


Bookmark and Share Reports < Report Retention > Schedule Reports

Updated about a month ago


Report Retention


Suggested Edits are limited on API Reference Pages

You can only suggest edits to Markdown body content, but not to the API spec.