Using service endpoints to privately connect to IBM Cloud Activity Tracker

To ensure that you have enhanced control and security over your data when you use IBM Cloud® Activity Tracker, you have the option of using private routes to IBM Cloud® service endpoints. Private routes are not accessible or reachable over the internet. By using the IBM Cloud private service endpoints feature, you can protect your data from threats from the public network and logically extend your private network.

As of 28 March 2024 the IBM Log Analysis and IBM Cloud Activity Tracker services are deprecated and will no longer be supported as of 30 March 2025. Customers will need to migrate to IBM Cloud Logs, which replaces these two services, prior to 30 March 2025.

You can use private and public endpoints to configure IBM Cloud® Activity Tracker resources in your account.

You can connect to IBM Cloud Activity Tracker over a private network by using IBM Cloud private service endpoints.

When using the classic infrastructure, you connect to resources in your account over the IBM Cloud public network by default. You can enable virtual routing and forwarding (VRF) to move IP routing for your account and all of its resources into a separate routing table. If VRF is enabled, you can then enable IBM Cloud service endpoints to connect directly to resources without using the public network. Enabling VRF and service endpoints.
Virtual Private Clouds (VPCs) are automatically enabled for virtual routing and forwarding (VRF). To enable service endpoints for your VPC, continue to Enabling service endpoints.

Before you begin

Check if the account is VRF enabled by running the following command:

ibmcloud account show

To enable private endpoints, run the following command:

ibmcloud account update --service-endpoint-enable true

Setting up service endpoints for IBM Cloud Activity Tracker

By default, private and public endpoints are enabled. For more information about supported endpoints, see Endpoints.

Disabling public service endpoints for IBM Cloud Activity Tracker

You cannot disable private endpoints.

You can disable public endpoints per region in your account for IBM Cloud Activity Tracker:

If public and private endpoints are enabled, you can disable a public endpoint by using private or public endpoints.
If public endpoints have been disabled, you can only enable public endpoints by using the private endpoint.

For more information on how to disable a public endpoint, see Disabling public endpoints.

Limitations using private endpoints

The UI for IBM Cloud Activity Tracker is not currently supported on the CSE network.