Forum Discussion
How do I create a custom data table and is it necessary in this scenario?
Recently came across some documentation to push logs in an AWS S3 bucket to Sentinel using a lambda function via the log analytics API. Looking at the documentation it looks like I would have to setu...
you need to ingest the data into the Custom table to be able to query it. The custom table is where it's stored in log analytics.
You can check the schema before ingestion.
https://learn.microsoft.com/en-us/azure/sentinel/data-source-schema-reference
- Yes
- Thanks so much for all of the help.