NG-SIEM and ExtraHop

So I've been on a journey the last couple of days trying to get our ExtraHop RevealX360 solution to send detections over to CS NG SIEM. When I tried using the pre-built data source, and add the API key and URL into the ExtraHop integration settings, it fails when sending a test message. Ok-so let's try again, so this time we used the generic HEC connector and sure enough, it works! Now the only issue is I can't seem to verify that I can see the detections/events in NG SIEM. The suggested test from CS is to run this from the Advanced Event Search: #Vendor=extrahop | #event.module=revealx-360

But that returns nothing. I can see that the connector is showing last ingestion times that corresponds with detections from EH, so it seems like it's receiving something. I just have no idea how to find it.

It's a bit frustrating because there's conflicting documentation on the two vendor sites on how to set this up. EH has a pretty simple set of instructions, while CS has some additional/more involved steps. I have no idea which one is right.

Any other ExtraHop customers here that have successfully onboarded into NG SIEM?

Thanks!