Verify Data is Arriving in LogScale
Once you have completed the above steps, the Talon Cyber Security logs should be arriving in your LogScale repository.
You can verify this by doing a simple search for
#logtype = "talon"
to see the events. Check
the category field to make sure that events are present from
all the expected Talon Cyber Security data sets.
You should see the events as displayed in the following screenshot.
Figure 56. Verify Data