Forum Discussion
FahadAhmed
Aug 28, 2023Copper Contributor
Table based transformation not working when onboarding systems through AMA agent
Hi, We initially had a few servers with MMA agent deployed, we performed transformation on "SecurityEvent" table to drop unwanted event IDs. Now when we are installing AMA agent on the same machines...
BillClarksonAntill
Sep 15, 2023Iron Contributor
Before i answer the above, i need to know if you waited 1 hour after you applied the transformation against the table / DCR rule
There is a delay at the API level which can make you think its not working
There is a delay at the API level which can make you think its not working
FahadAhmed
Sep 19, 2023Copper Contributor
Thanks for the guidance bill, I have figured out the answer. Table based transformations donot apply for AMA based log ingestions, we will need DCR. Performed DCR based transformation and its working fine.
Thanks