Merge pull request #213593 from vhorne/fw-pol-analytics

add tshoot tip

Author: prmerger-automator[bot]

articles/firewall/firewall-preview.md

@@ -5,7 +5,7 @@ services: firewall
 author: vhorne
 ms.service: firewall
 ms.topic: conceptual
-ms.date: 09/27/2022
+ms.date: 10/04/2022
 ms.author: victorh
 ---
 
@@ -176,6 +176,9 @@ Policy analytics starts monitoring the flows in the DNAT, Network, and Applicati
 
    You can disregard this error message if the policy was successfully updated.
 
+> [!TIP]
+> Policy Analytics has a dependency on both Log Analytics and Azure Firewall resource specific logging. Verify the Firewall is configured appropriately or follow the previous instructions. Be aware that logs take 60 minutes to appear after enabling them for the first time. This is because logs are aggregated in the backend every hour. You can check logs are configured appropriately by running a log analytics query on the resource specific tables such as **AZFWNetworkRuleAggregation**, **AZFWApplicationRuleAggregation**, and **AZFWNatRuleAggregation**.
+
 ## Next steps
 
 To learn more about Azure Firewall, see [What is Azure Firewall?](overview.md).