i tried to configure the Smartconnector , but need to verify the actual working of the Smart connector, as it seems to forward logs from Azure to Arcsight Syslog directly, but how is the flow in the Azure for conversion and Storing in Azure, whether it converts the logs from JSON to CEF and stores the CEF and forwards it OR Keeps the logs Just converts the logs in CEF format and sends it, rather than storing it, these things are still not clear in the documentation.
i tried to configure the Smartconnector , but need to verify the actual working of the Smart connector, as it seems to forward logs from Azure to Arcsight Syslog directly, but how is the flow in the Azure for conversion and Storing in Azure, whether it converts the logs from JSON to CEF and stores the CEF and forwards it OR Keeps the logs Just converts the logs in CEF format and sends it, rather than storing it, these things are still not clear in the documentation.