I am looking for information on getting Cisco Umbrella (cloud) events into ArcSight. Any help is appreciated.
Take a look at the attached URL
good day to you. I understand it has been a long while you requested for this but then, I would like to find out if you were able to get it to work whether with community's input or you figured something out eventually.
On my part, I was able to get it to work with the latest SmartConnector 8.0 framework which has by default a CISCO UMBRELLA agent. Unfortunately, I could not get more than 10 logs, after which i could not see the logs coming again. Checked agent.log and found this error -"[ERROR] [java.lang.Exception: Incorrect format, expected  for cisco umbrella tokens, found "-