umbrella-s3-objects
List S3 log objects from Cisco Umbrella export bucket.
Syntax
umbrella-s3-objects [profile=PROFILE] [type=dns|audit] [duration=NUM{mon|w|d|h|m|s}] [from=yyyyMMddHHmmss] [to=yyyyMMddHHmmss]
Options
- profile=PROFILE
- Optional. Cisco Umbrella S3 connect profile code
- type=dns|audit
- Optional. Log type filter. dns or audit
- duration=NUM{mon|w|d|h|m|s}
- Optional. Scan only recent data. Use s(second), m(minute), h(hour), d(day), mon(month) time unit.
- from=yyyyMMddHHmmss
- Optional. Start time of range. yyyyMMddHHmmss format.
- to=yyyyMMddHHmmss
- Optional. End time of range. yyyyMMddHHmmss format.
Output Fields
| Field | Type | Name | Description |
|---|---|---|---|
| profile | String | Profile | Cisco Umbrella S3 connect profile code |
| category | String | Category | e.g. dns, audit |
| key | String | Key | e.g. dnslogs/2026-04-13/2026-04-13-01-30-0dd1.csv.gz |
| file_size | Long | File Size | e.g. 296 |
| created | Date | Created | e.g. 2026-04-13 01:40:05 |