Where are Logs Stored?
When you create a policy, activity logs are by default saved to the North America – California, US location of the Secure Access data warehouse. You can change the location of the data warehouse to Europe at any time. For more information, see Change the Location of Event Data Logs.
You can also optionally configure logging so that logs are also stored to an Amazon S3 bucket—either your own or one managed by Cisco.