Scenario: Connecting your IoT Data to Analytics Cloud

Configure access to view your Internet of Things (IoT) data in Oracle Analytics Cloud.

The IoT domain database schema contains the metadata and data from the digital twin resources associated to an IoT domain.

1. In your Internet of Things tenancy, log in as an administrator.
2. Open the navigation menu, select Networking, and then select Virtual Cloud Networks.
3. On the Virtual Cloud Networks list page, select Create VCN. If you want to use an existing VCN, to see VCNs in a different compartment select a compartment, next to Applied filters to change compartments.
4. Enter a descriptive name for the VCN. It doesn't have to be unique, and it can't be changed later in the Console, you can change it later with the Identity domain API or CLI. Avoid entering confidential information.
5. Verify the compartment you want to create the VCN in, select another compartment if needed.
   Note
   
   Your VCN must be in the same region as your IoT domain group and all other IoT resources. The limit to the number of VCNs you can associate to an IoT domain is 5.
6. In the IPv4 CIDR Blocks section, enter an IP range that's allowed to access the database, for example: 10.0.0.0/16
7. Turn on the toggle to use DNS host names in the VCN, confirm DNS label is entered in the field below.
8. Confirm or enter the DNS Domain Name, for example:

   <vcn-name>.oraclevcn.com

9. Select Create a VCN. For a complete list of additional settings, see Creating a VCN.
10. The Virtual Cloud Network details page opens, with the OCID for this VCN. Select the Subnets tab. Select Create Subnet.
11. On the Create a Subnet page, use the following settings:
    1. Enter a friendly name for the subnet. It doesn't have to be unique, and it can't be changed later in the Console, you can change it later with the Identity domain API. Avoid entering confidential information.
    2. Verify the compartment that you want to create the subnet in. Select another compartment if needed. Your Subnet and VCN must be in the same region as the IoT database and your IoT domain group and domain resources.
    3. Select the subnet type, Regional. A regional subnet means that the subnet can contain resources in any of the region's availability domains.
    4. Enter a IPv4 CIDR Block, for example 10.0.0.0/16.
    5. Under the IPv6 Prefixes, confirm the Route Table compartment for your IoT resources is selected. For the Route Table, select the Default Route Table for this VCN.
    6. Select Private Subnet access to prohibit public IP address for Instances in this subnet.
    7. Under DNS Resolution, select the check box Use DNS host names in this Subnet. Confirm DNS Label is in the following field.
    8. Enter the DNS Domain Name with the subnet DNS label name, for example:

       <subnet_DNS_label>.<VCN_DNS_label>.oraclevcn.com

    9. For the Dhcp Options compartment confirm or select the compartment with your IoT resources. For Dhcp Options, confirm or select the Default Dhcp Options for the VCN name.
    10. For the Security List compartment, confirm or select the compartment with your IoT resources. Confirm or enter Security List in the next field.
    11. Select Create Subnet.

        For a list of additional settings and more information, see Creating a Subnet and Overview of VCNs and Subnets.

12. The Subnet is created for the Virtual Cloud Network and it's details page opens, select the Gateways tab. Under Service Gateways, select Create Service Gateway.
13. Enter a name for the service gateway. It doesn't have to be unique. Avoid entering confidential information. Select the compartment that you want to create the gateway in. Select another compartment if needed. The compartment must be in the same region as the database and other IoT resources.
14. For Services, select the option: All <region> Services In Oracle Services Network.

    For more information, see the Available Service CIDR Labels on the Creating a Service Gateway page.

15. Select Create Service Gateway.
16. The Virtual cloud networks details page opens, select the Routing tab.
17. Under Route Tables, select the Default Route Table.
18. Select the Route Rules tab, and select Add Route Rules to edit and apply Route Table Rules to the Service Gateway. For more information, see Updating a VCN Route Table's Rules or see Updating a Service Gateway's Route Table Association to change the association later.
    • For Target Type, select Service Gateway.
    • For Destination Service, select All <region> Services In Oracle Services Network .
    • Select the Target Service Gateway compartment. Select the same compartment that you selected when you created the service gateway in the previous step.
    • Select the Target Service Gateway created in the previous step. Optionally, enter a description.
    • Select Add Route Rules.
    For more information, see add a routing rule.
19. The Route Rule is created and displays on the Route Rule list page.
20. Go to the Virtual Cloud Network details page for the VCN, if you need help finding the VCN, see Listing VCNs and then select the VCN you want to work with.
21. Select the Security tab. The Security List page opens. For more information, see Creating an Network Security Group (NSG).
22. Go to the Network Security Groups section. Under Resources, select Network Security Groups.
23. Select Create Network Security Group, enter the following settings:
    • Enter a name, select the same compartment you selected in the previous step.
    • In the Rule section, for the Direction, select Egress.
    • For the Destination Type, select CIDR.
    • In the Destination CIDR field, enter the CIDR for your environment for example: 0.0.0.0/0
    • For IP Protocols select All Protocols.
24. Select Create. For more information, see Network Security Group.
25. The Network Security page opens, to view the details for the Network Security Group.
26. On the Virtual cloud network details page, copy the OCID for the VCN or VCNs. Use this VCN OCID or VCN OCIDs in the next step.

oci iot domain-group configure-data-access --db-allow-listed-vcn-ids '["<vcn-ocid>"]' --iot-domain-group-id <iot-domain-group-OCID>

oci iot domain-group get --iot-domain-group-id <iot-domain-group-OCID>

{
  "data": {
    "compartment-id": "<compartment-OCID>",
    "data-host": "<domain-group-short-id>.iot-data.<region>.oci.oraclecloud.com",
    "db-allow-listed-vcn-ids": [
      "<vcn-OCID>"
    ],
    "db-connection-string": "tcps:adb.<region>.oraclecloud.com:<port>/<unique-id>.adb.oraclecloud.com?retry_count=20&retry_delay=3",
    "db-token-scope": "urn:oracle:db::id::ocid1.<database-compartment-OCID>",
    "defined-tags": {
      "Oracle-Tags": {
        "CreatedBy": "default/user@oracle.com",
        "CreatedOn": "2025-08-11T19:21:24.791Z"
      }
    },
    "description": "<your-description>",
    "display-name": "<your-display-name>",
    "freeform-tags": {},
    "id": "<domain-group-OCID>",
    "lifecycle-state": "ACTIVE",
    "system-tags": {},
    "time-created": "2025-08-11T19:21:26.411000+00:00",
    "time-updated": "2025-08-12T02:17:02.763000+00:00"
  },
  "etag": "<unique-id>"
}

oci iot domain configure-direct-data-access --iot-domain-id <iot-domain-OCID> --db-allow-listed-identity-group-names '["<tenancy-OCID:<identity-domain-name>/<identity-group-name>"]'

1. On the Analytics Cloud Instance Details page, under Access Information select the OAC Access URL to go to Oracle Analytics Cloud. Select Create and then Connection.
2. Select Oracle Autonomous Transaction Processing database enter the following information for the specific IoT domain group. Use oci iot domain-group get command to find the specific values for your IoT domain group, described in the previous step:
   • Connection Name: Enter a name for this connection.
   • Description: (Optional) Enter a description.
   • Encryption Type: TLS
   • Connection String: Use the following connection string and replace the values from your specific IoT domain group. For example:

     • Replace the <database-service-name> with the database from the db-connection-string from your IoT domain group.

       <unique-id>.adb.oraclecloud.com

     • Replace the <user-tenancy-OCID> with your tenancy OCID where you created your IoT domain and Oracle Analytics Cloud is located.
     • Replace the <database-compartment-OCID> from the db-token-scope
     • Replace the <region> with your region name that must be in the same region as the <database-hostname>. For example: us-phoenix-1
     Connection string:

     (description=
       (retry_count=20)
       (retry_delay=3)
       (address=
         (protocol=tcps)
         (port=1521)
         (host=<database-host-name>)
       )
       (connect_data=(service_name=<database-service-name>))
       (security=
         (ssl_server_dn_match=yes)
         (password_auth=OCI_TOKEN)
         (oci_iam_url=https://auth.<region>.oraclecloud.com/v1/actions/generateScopedAccessBearerToken)
         (oci_tenancy=<user-tenancy-OCID>)
         (oci_compartment=<database-compartment-OCID>)
       )
     )

   • Username: Enter the Identity domain user and group set up in the previous step.
     • An <identity-group-name> is either the Identity group of users or an Identity dynamic group.
     • If not in the default identity domain then you specify the identity domain and the group name: <identity-domain-name>/<identity-group-name>
   • Password: Enter the database password for the Identity domain user or group. To change your database password:
     1. Open the navigation menu, go to Identity & Management, select domains.
     2. On the domain list page, select the Identity domain that you want to work with and connect to an IoT domain.
     3. Select the User Management tab, select the user you want to update the password for. Select the Database Passwords tab, to update the password delete your current IAM database password and create a new IAM database password.
3. Select Save.

4. Now, you can view your IoT data in Oracle Analytics Cloud.

   From the Analytics Cloud home page, click Create, then click Dataset, then select the connection that you just created to view and analyse your IoT data in Analytics Cloud.

   Right click and select open in new browser to view a larger screenshot.