Provision a Cisco Secure Cloud Analytics Portal

Required License: Logging Analytics and Detection or Total Network Analytics and Monitoring

If you purchase a Logging Analytics and Detection or Total Network Analytics and Monitoring license, after you deploy and configure the Secure Event Connector (SEC), you must associate a Secure Cloud Analytics portal with your CDO portal to view Secure Cloud Analytics alerts. When you purchase the license, if you have an existing Secure Cloud Analytics portal, you can provide the Secure Cloud Analytics portal name and immediately link it to your CDO portal.

Otherwise, you can request a new Secure Cloud Analytics portal from the CDO UI. The first time you access Secure Cloud Analytics alerts, the system takes you to a page to request the Secure Cloud Analytics portal. The user that requests this portal is granted administrator permission in the portal.

Procedure

Step 1

In the left pane, click Analytics > Secure Cloud Analytics to open the Secure Cloud Analytics UI in a new window.

Step 2

Click Start Free Trial to provision a Secure Cloud Analytics portal and associate it with your CDO portal.

Note	After you request the portal, the provisioning may take up to several hours.

Ensure that your portal is provisioned before moving on to the next step.

In the left pane, click Analytics > Secure Cloud Analytics to open the Secure Cloud Analytis UI in a new window.
You have the following options:
- If you requested a Secure Cloud Analytics portal, and the system states it is still provisioning the portal, wait and try to access the alerts later.
- If the Secure Cloud Analytics portal is provisioned, enter your Username and Password, then click Sign in.

Note	The administrator user can invite other users to create accounts within the Secure Cloud Analytis portal. See Viewing Cisco Secure Cloud Analytics Alerts from CDO for more information.

What to do next

If you purchased a Logging Analytics and Detection license, your configuration is complete. If you want to view the status of your CDO integration or sensor health from the Secure Cloud Analytics portal UI, see Review Sensor Health and CDO Integration Status in Secure Cloud Analytics for more information. If you want to work with alerts in the Secure Cloud Analytics portal, see Viewing Cisco Secure Cloud Analytics Alerts from CDO and Working with Alerts Based on Firepower Events for more information.
If you purchased a Total Network Analytics and Monitoring license, deploy one or more Secure Cloud Analytics sensors to your internal network to pass network flow data to the cloud. If you want to monitor cloud-based network flow data, configure your cloud-based deployment to pass flow data to Secure Cloud Analytics. See Cisco Secure Cloud Analytics Sensor Deployment for Total Network Analytics and Reporting for more information.