After purchasing Cortex Data Lake, you received
an auth code that you’ll use to activate Cortex Data Lake.
steps here describe how to activate Cortex Data Lake on the hub if you’re using Cortex XDR, Cloud Managed
Prisma Access, or firewalls that are not managed by Panorama.
How you activate and implement Cortex Data
Lake varies depending on the products and services you’re using.
Learn more about what you should do to get started with Cortex Data Lake based on the product
you’re using. For example,
If you are using PAN-OS 10.0 or later firewalls, and if you were sharing telemetry
data with Palo Alto Networks prior to purchasing a Cortex Data Lake license, then you
already have a small, unlicensed Cortex Data Lake instance. This instance exists
solely for the purpose of storing your PAN-OS telemetry data.
When you activate your license Palo Alto Networks will upgrade this tenant to a full
Cortext Data Lake instance, so long as the region you use to send telemetry data to
Palo Alto Networks is the same region that you use when you activate your Cortex Data
Lake license. If you use different regions for this purpose, then the small
telemetry-specific tenant will not upgrade to your new, licensed Cortex Data Lake
When you add a new log source (like the firewall or Cortex
XDR), log storage quota is not allocated for the log types that
belong to this source. Until you allocate log storage, logs are
not saved in Cortex Data Lake.