The Umbrella Documentation Hub

Welcome to the Umbrella documentation hub. Here you'll find access to all of our Cisco Umbrella user guides.

Get Started    

Schedule Reports

Various reports in Umbrella can be configured so that Umbrella regularly emails you a summary of that report. And you configure filters for these reports so that they only contain the information you want. Each emailed report includes an HTML version of the report, a .ZIP file containing a CSV file with the entire data set, and a link to Umbrella and the report. See Schedule a Report.

Reports can be scheduled so that you receive an email daily, weekly, or monthly.

Note: You can unsubscribe from a report email through the Unsubscribe link at the bottom of every report email.

You can schedule the following reports:

  • Security Overview—Gives you a snapshot of your environment's security activities.
  • Security Activity—Security-related activity in your environment, including malware, phishing, and all other security categories over the selected time period. Filterable by identity, destination, source IP, and security category.
  • Activity Search—Activity from the identities in your environment over a selected time period. Filterable by identity name, destination, source IP, response, content category, and security category.
  • Threats—Highlights blocked and allowed threats your organization may have been exposed to over a selected period of time.
  • Total Requests—Total requests for destinations from your organization over the selected time period. Filterable by identity.
  • Activity Volume—Total queries within your organization broken down by security categories and results over the selected time period.
  • Top Destinations—A list of the most requested domains within your organization over the selected time period. Filterable by identity, response, destination, content category, and security category.
  • Top Categories—A list of the top content categories for your organization over the selected time period. Filterable by identity and response.
  • Top Identities—A list of the top traffic-generating identities over the selected time period. Filterable by identity and destination.

Important

Cisco Umbrella uses SparkPost as the service to deliver email. Some mail filters, either at the local level or even at a transport layer (like an ISP) may block communications from SparkPost as marketing-related spam. If after scheduling your reports you do not receive them, check the spam filter at your mail server gateway. Whether your mail server gateway is hosted locally or in the cloud, it's likely the email was quarantined at that level.

Umbrella sends its reports from: [email protected]


Getting Started with Reports < Scheduling Reports > Schedule a Report

Updated 9 days ago


Schedule Reports


Suggested Edits are limited on API Reference Pages

You can only suggest edits to Markdown body content, but not to the API spec.