Getting started with your Blumira Cloud or Blumira Advanced subscription

Overview

Whether you are setting up your new account on your own or with the guidance of our expert Technical Account Managers (available for Advanced edition subscribers only), you can begin experiencing the value of Blumira's robust threat detection today.

You can use the information in this article to connect your data sources and build your team of Blumira users. After logs start flowing to Blumira, our detection rules automatically start identifying activity and sending your team notifications about findings.

Step	Description	Procedure
1	Activate your account and update your personal settings.	To activate and manage your Blumira account: In your email inbox, locate the account verification email that Blumira sent you. Follow the email's instructions to verify your account. Log in to the Blumira app. Click  to open Account Settings, where you can edit your name or change the app's theme to dark mode. Click  to open Notification Settings, where you can manage your personal notification information and preferences. Reference: Read About user notifications to understand how these settings help you and your team to respond to Blumira findings.
2	Configure your environment to send logs to Blumira.	Follow the instructions in Integrating your data sources with Blumira.
3	Build your Blumira response team.	To build your Blumira response team in the app by completing the procedures in the following articles: Adding users to your Blumira account Editing notification settings
4	Learn about how to use Blumira for your ongoing security needs.	Browse the articles in the following sections to learn about how you can use the Blumira features to respond to threats, analyze your data, and manage the settings for your organization: Detection rules and filters Findings and notifications Firewall blocklists Reporting Dashboards User and account administration

Integrating your data sources with Blumira

To send your logs to Blumira, complete the integration procedures below, based on the data sources that you want to connect to Blumira.

Important: You must be an Administrator in Blumira to perform the steps in these integration guides.

Step	Description	Procedure
1	Do one of the following, based on your Blumira subscription: If you have Blumira Advanced, then prepare Blumira to receive logs. If you do not have Blumira Advanced, then proceed to Step 2.	Building a Blumira sensor on Ubuntu
		Allowlisting outbound traffic for Blumira sensors
		Deploying a Blumira honeypot
2	Connect your various data sources.	Business and productivity services
		Cloud security services (Advanced only)
		Endpoint protection services (Cloud and Advanced only)
		Firewalls (Advanced only)
		Identity services (Cloud and Advanced only)
		Operating system and servers (Advanced only) Windows Important: Use Blumira's Poshim script and Logmira GPO settings for the quickest and highest-yielding integration with Windows machines. Linux Other systems
3	Verify that your logs reach Blumira.	Verifying that a Cloud Connector integration was successful
		Verifying that a sensor module integration was successful (Advanced only)