How to: The command "vault token create -period=1h" creates a child token valid for an one hour duration allowing not to expose directly your vault token.
There is a demo sandbox LogAnalytics Workspace portal that allows you to test or design LogAnalytics queries in an environment powered by anonymized data.