SOLVED

Upload data to default Log Analytics table

%3CLINGO-SUB%20id%3D%22lingo-sub-1568888%22%20slang%3D%22en-US%22%3EUpload%20data%20to%20default%20Log%20Analytics%20table%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1568888%22%20slang%3D%22en-US%22%3E%3CP%3EHi%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIt%20is%20possible%20to%20upload%20data%20to%20a%20custom%20table%20in%20Log%20Analytics%20workspace%20using%20the%20script%20provided%20on%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fazure-sentinel%2Fazure-sentinel-creating-custom-connectors%2Fba-p%2F864060%22%20target%3D%22_blank%22%3Ehttps%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fazure-sentinel%2Fazure-sentinel-creating-custom-connectors%2Fba-p%2F864060%3C%2FA%3E.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIs%20it%20possible%20to%20upload%20data%20to%20a%20default%20table%2C%20for%20example%20to%20the%20SecurityEvent%20table%3F%20My%20goal%20is%20to%20export%20some%20data%20from%20a%20table%2C%20then%20change%20some%20values%20and%20upload%20them%20to%20the%20same%20table%20for%20testing%20purposes.%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1569061%22%20slang%3D%22en-US%22%3ERe%3A%20Upload%20data%20to%20default%20Log%20Analytics%20table%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1569061%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F666494%22%20target%3D%22_blank%22%3E%40Cyb3rMonk%3C%2FA%3E%26nbsp%3BNo.%26nbsp%3B%20All%20externally%20loaded%20information%20will%20go%20into%20a%20custom%20table.%26nbsp%3B%20Even%20some%20of%20the%20OOTB%20data%20connectors%2C%20like%20Okta%2C%20write%20to%20a%20custom%20table.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EYou%20can%20always%20use%20a%20join%20to%20combine%20the%20information%20from%20the%20existing%20and%20the%20custom%20tables.%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
Contributor

Hi,

 

It is possible to upload data to a custom table in Log Analytics workspace using the script provided on https://techcommunity.microsoft.com/t5/azure-sentinel/azure-sentinel-creating-custom-connectors/ba-p...

 

Is it possible to upload data to a default table, for example to the SecurityEvent table? My goal is to export some data from a table, then change some values and upload them to the same table for testing purposes. 

1 Reply
Highlighted
Best Response confirmed by Cyb3rMonk (Contributor)
Solution

@Cyb3rMonk No.  All externally loaded information will go into a custom table.  Even some of the OOTB data connectors, like Okta, write to a custom table.

 

You can always use a join to combine the information from the existing and the custom tables.