Step 11: Verifying the Integration

To verify the integration, confirm that Avanan events appear in the Log Analytics workspace:

  1. Generate or wait for a new Avanan event.
  2. Open the Microsoft Sentinel workspace.
  3. Select Logs.
  4. Run a query against the custom Avanan table.
  5. Replace the table name in the following example with the table created by the solution: 
    AvananEvents_CL
                        | where TimeGenerated > ago(30m)
                        | order by TimeGenerated desc
  6. Confirm the following:

    • New events appear in the table.

    • The event timestamps are correct.

    • The expected event fields are populated.

    • Events are associated with the correct Avanan tenant.

    Note:

    The Log Analytics table name may end with _CL, while the DCR stream entered in the Avanan portal may begin with Custom-.