Online Help Center Home
Privacy and Personal Data Collection Disclosure
- Pre-release Disclaimer
- Pre-release Sub-feature Disclaimer
Trend Micro Vision One Data Privacy, Security, and Compliance
Introduction
- Trend Micro Vision One
- Checking the Trend Micro Vision One Service Status
  - SERVICE LEVEL OBJECTIVES FOR TREND MICRO VISION ONE (herein this “SLO”)
Getting Started
- Getting Started with Trend Micro Vision One
- Getting Started with Vulnerability Prioritization and Assessment
Risk Insights
XDR Threat Investigation
Threat Intelligence
Workflow and Automation
Zero Trust Secure Access
Assessment
- Security Assessment Service
Endpoint Security Operations
Network Security Operations
- Network Inventory
- Network Intrusion Prevention
Email Security Operations
- Email Account Inventory
  - Email Sensor Management
Mobile Security Operations
Point Product Connections
- Product Connector
  - Connecting a Product
  - Required Settings on Supported Products
Account

Checking Ingested Data in Log Analytics Workspace

Alert data ingested by Azure Sentinel is stored in Log Analytics workspaces.

Important:

An empty Log Analytics workspace indicates that no new alerts were created after the connector was successfully deployed. The connector does not pull preexisting alert data from Trend Micro Vision One.

Go to Log Analytics workspaces > {your_workspace} > General > Logs.
In the Tables tab, under Custom Logs, verify that the TrendMicro_XDR_CL table exists.
This table should exist if alerts were created in Trend Micro Vision One after the connector was successfully deployed.
Click Run to run the query and view the data.