Prerequisites for onboarding OCI

Before you begin onboarding Oracle Cloud Infrastructure, you must review the following prerequisites.

Permissions

Before you begin to onboard Oracle Cloud Infrastructure (OCI) to Cortex Cloud, ensure that you have the necessary permissions:

• In Cortex Cloud, you must have a Cortex Cloud role with Data Sources - View & Edit permissions (to add/configure cloud accounts in Cortex Cloud). This role is included in the following built-in roles: Instance Administrator, Security Admin, and IT Admin.
• In OCI, your credentials must include permissions for the following:

  • Creation of identity groups (for more information, refer to Managing Groups)
  • Policies (for more information, refer to How Policies Work)
  • Tag namespaces in the root compartment (for more information, refer to Tags and Tag Namespace Concepts)

Additional prerequisites

Before you begin onboarding OCI, ensure that:

• You have access to the Oracle Cloud Infrastructure console.
• If you plan to enable audit log collection, you must first configure the OCI connector for log collection.
• If you want to use bucket replication, see Object Storage Replication

Configure the OCI connector for log collection

In order to enable audit log collection in Cortex Cloud, you must first create an OCI service connector. For more details, see Creating a Connector with a Logging Source. After you have created the OCI service connector, you can proceed to Onboard Oracle Cloud Infrastructure and enable collection of audit logs.

1. Log in to the OCI Console. Open the navigation menu and go to Analytics and AI → Connector Hub.
2. On the Connectors page, click Create connector.
3. On the Create Connector page, enter a descriptive name for the new connector (for example, CortexCloud_Log_Exporter). Click Create connector.
4. Select the Compartment where you want to store the new connector resource.
5. Set the Source service to Logging.
6. Set the Target service to Object Storage. This is the storage bucket that Cortex Cloud will read from.
7. Under Configure target, configure the storage bucket to send the log data to:

   • Compartment: Select the compartment that contains the bucket that you want to use.
   • Bucket: Select the name of the bucket that you want to send the data to.
   • Object Name Prefix: (Optional) Enter a prefix value.
   • Show additional options: (Optional) Click this link to enter values for batch size (in MBs) and batch time (in milliseconds).
8. (Optional) Add one or more tags to the connector. Select Show Advanced Options to show the Add Tags section.
9. Click Create. When the connector is ready, the connector's details page opens.