Activate Cortex Data Lake

After purchasing Cortex Data Lake, you received an auth code that you’ll use to activate Cortex Data Lake.
The steps here describe how to activate Cortex Data Lake on the hub if you’re using Cortex XDR, Cloud Managed Prisma Access, or firewalls that are not managed by Panorama.
How you activate and implement Cortex Data Lake varies depending on the products and services you’re using. Learn more about what you should do to get started with Cortex Data Lake based on the product you’re using. For example,
if you’re using Panorama
(either to manage on-prem firewalls or for Panorama Managed Prisma Access), you’ll need to use the Customer Support Portal to activate Cortex Data Lake instead of the hub.
  1. Activate Cortex Data Lake.
    1. Log in to the hub.
    2. Activate New App
      .
      hub-activate-new-app.png
    3. Enter the
      Auth Code
      you received to activate Cortex Data Lake and
      Continue
      .
    4. Enter an
      Instance Name
      so that you can identify this app instance in the hub, and optionally add a
      Description
      .
    5. Select the
      Region
      you want to host the Cortex Data Lake instance.
      activate-paid-ls.png
    6. Click
      Agree and Activate
      .
    7. Verify that Cortex Data Lake is successfully activated on the hub.
      Cortex Data Lake was previously called the Logging Service, and you might continue to see that name listed as the application name.
      activate-paid-ls-complete.png
  2. In the hub, log in to the Cortex Data Lake app instance you just activated.
  3. Select
    Configuration
    and allocate storage for each log type that you plan to forward to Cortex Data Lake.
    When you add a new log source (like the firewall or Cortex XDR), log storage quota is not allocated for the log types that belong to this source. Until you allocate log storage, logs are not saved in Cortex Data Lake.
  4. After you enable firewalls to authenticate to Cortex Data Lake, you can start forwarding logs.

Recommended For You