I have a new article on how you can tackle this problem with Log Analytics and of course the query used is a very good example on transforming data.
https://cloudadministrator.wordpress.com/2017/11/14/find-if-you-are-using-only-tls-1-2-protocol-with...
