> For the complete documentation index, see [llms.txt](https://cortex-docs.paloaltonetworks.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/cloud-service-provider-csp-onboarding/oracle-cloud-infrastructure-cloud-onboarding/prerequisites-for-onboarding-oci.md).

# Prerequisites for onboarding OCI

## Permissions

Before you begin to onboard Oracle Cloud Infrastructure (OCI) to Cortex XSIAM, ensure that you have the necessary permissions:

* In Cortex XSIAM, you must have a Cortex XSIAM role with Data Sources - View & Edit permissions (to add/configure cloud accounts in Cortex XSIAM). This role is included in the following built-in roles: Instance Administrator, Security Admin, and IT Admin.
* In OCI, your credentials must include permissions for the following:
  * Creation of identity groups (for more information, refer to [Managing Groups](https://docs.oracle.com/en-us/iaas/Content/Identity/Tasks/managinggroups.htm))
  * Policies (for more information, refer to [How Policies Work](https://docs.oracle.com/en-us/iaas/Content/Identity/Concepts/policies.htm#How_Policies_Work))
  * Tag namespaces in the root compartment (for more information, refer to [Tags and Tag Namespace Concepts](https://docs.oracle.com/en-us/iaas/Content/Tagging/Tasks/managingtagsandtagnamespaces.htm))

### Additional prerequisites

Before you begin onboarding OCI, ensure that:

* You have access to the Oracle Cloud Infrastructure console.
* If you plan to enable audit log collection, you must first [configure the OCI connector for log collection](#configure-the-oci-connector-for-log-collection).
* If you want to use bucket replication, see [Object Storage Replication](https://docs.oracle.com/en-us/iaas/Content/Object/Tasks/usingreplication.htm)

### Configure the OCI connector for log collection

In order to enable audit log collection in Cortex XSIAM, you must first create an OCI service connector. For more details, see [Creating a Connector with a Logging Source](https://docs.oracle.com/en-us/iaas/Content/connector-hub/create-service-connector-logging-source.htm). After you have created the OCI service connector, you can proceed to [Onboard Oracle Cloud Infrastructure](/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/cloud-service-provider-csp-onboarding/oracle-cloud-infrastructure-cloud-onboarding/onboard-oracle-cloud-infrastructure.md) and enable collection of audit logs.

1. Log in to the [OCI Console](https://cloud.oracle.com/). Open the navigation menu and go to **Analytics and AI → Connector Hub**.
2. On the **Connectors** page, click **Create connector**.
3. On the **Create Connector** page, enter a descriptive name for the new connector (for example, `CortexCloud_Log_Exporter`). Click **Create connector**.
4. Select the Compartment where you want to store the new connector resource.
5. Set the **Source** service to **Logging**.
6. Set the **Target** service to **Object Storage**. This is the storage bucket that Cortex XSIAM will read from.
7. Under **Configure target**, configure the storage bucket to send the log data to:
   * **Compartment**: Select the compartment that contains the bucket that you want to use.
   * **Bucket**: Select the name of the bucket that you want to send the data to.
   * **Object Name Prefix**: (Optional) Enter a prefix value.
   * **Show additional options**: (Optional) Click this link to enter values for batch size (in MBs) and batch time (in milliseconds).
8. (Optional) Add one or more tags to the connector. Select **Show Advanced Options** to show the **Add Tags** section.
9. Click **Create**. When the connector is ready, the connector's details page opens.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://cortex-docs.paloaltonetworks.com/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/cloud-service-provider-csp-onboarding/oracle-cloud-infrastructure-cloud-onboarding/prerequisites-for-onboarding-oci.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.