Verify Data is Arriving in LogScale

Once you have completed the above steps, the Talon Cyber Security logs should be arriving in your LogScale repository.

You can verify this by doing a simple search for #logtype = "talon" to see the events. Check the category field to make sure that events are present from all the expected Talon Cyber Security data sets.

You should see the events as displayed in the following screenshot.

Verify Data

Figure 54. Verify Data