# Getting started with Recall

Recall deployments are a two step process where a Recall Stack is created by Vectra. Recall stack information is provided by Product Support. Then Recall forwarding is enabled on the Brain.

All access to Recall is achieved from the Detect UI. When looking at detections, hosts, accounts, etc. on the Detect UI, select the link **Investigate in Cognito Recall** to access Recall data. This will navigate to the Recall UI and access the data that is being investigated.

**Firewall requirements:**

* TCP Port 443 egress from Recall users to <[https://kibana.XXXXXX.recall.vectra.ai>](https://docs.vectra.ai/deployment/recall-qux-only/https:/kibana.XXXXXX.recall.vectra.ai>)
* TCP Port 443 egress from Vectra Brain to <[https://collector.XXXXXXX.recall.vectra.ai>](https://docs.vectra.ai/deployment/recall-qux-only/https:/collector.XXXXXXX.recall.vectra.ai>)
  * The XXXXXX portion will be replaced with a stack URL. You will receive an email from Vectra Support once the stack is created.

### Attachments

{% file src="/files/issr2W5ali9SDEWCs8Zx" %}


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.vectra.ai/deployment/recall-qux-only/getting-started-with-recall.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.