Thanks for the reference mate.! My usecase is to add the CEF logs to CommonSecurityLog table so that i can create usecases based on a single table to capture all the activities.
MS documents says, AMA can be used to send data to the table Common security logs using DCR, Now where i couldn't find the How-to document