There are one or two things you need to do in order to get started. First is that we need access to your Log Analytics workspace so we can display you the WAF logs, so you will need to give us Reader access to the workspace. Do not worry, you would give us access through Azure Lighthouse so we will have access only to what we are supposed to and is easily revokable if you change your mind. Second - you will need to have your Front Doors or App Gateways send logs into a single Log Analytics workspace. We don't plan on supporting the architecture where WAF logs are dispersed into multiple workspaces as it's not a good design philosophy.