Forum Discussion
Porter76
Jan 10, 2024Brass Contributor
Can I create DCR on a custom Data table?
Currently have a custom data table setup to ingest our AWS WAF logs. It is ingesting an enormous amount of data and I need a way to reduce this for the sake of cost. Is it possible to accomplish this...
Porter76
Jan 16, 2024Brass Contributor
Hi Clive,
The initial connector was setup with an AWS Lambda PS script that created the custom table in Sentinel and then periodically pushes the logs from an S3 to Sentinel.. How can I confirm whether i'm already on the Log Ingestion API?
The initial connector was setup with an AWS Lambda PS script that created the custom table in Sentinel and then periodically pushes the logs from an S3 to Sentinel.. How can I confirm whether i'm already on the Log Ingestion API?
Clive_Watson
Jan 16, 2024Bronze Contributor
If you go from Sentinel --> Settings --> Workspace settings. Then look at [tables] if they are (classic) then you are NOT on the right API. Select "edit schema" to get more info
- Porter76Jan 16, 2024Brass Contributor
Here's what I see when I follow those steps and look up the table I want to trim down. I don't see that it's classic.