title: Getting Azure VM event logs into Eventhubs
body: <p>We are currently investigating methods in getting our Security log data out of our Azure VM's and into our SIEM for analysis.</p>
  
  <p>Currently I have been able to get the logs from the VM to log analytics work-space but I'm no sure how to get them from the log analytics workspace to the eventhub to then pull down the events.</p>
  
  <p>Has anyone faced a similar challenge before / how did you overcome this challenge?</p>
  
  <p>I'm currently pull the data into a Log analytics workspace</p>