You are configuring Azure Resource logs for Azure functions in your company to get detailed diagnostic and auditing information for each function. It would help if you analyzed the logs using powerful log queries and visualizations. You configured the diagnostic settings to send the logs to the Log Analytics workspace. 
Now you have an additional requirement to send the logs outside of Azure. Which are the actions you need to perform to achieve this? Choose two.

Answer options:

A.Add a new diagnostic setting for the Function App and select ‘Stream to an event hub’.
B.From the diagnostic settings of the Function App select ‘Stream to an event hub’.
C.From the diagnostic settings of the Function App deselect ‘Send to Log Analytics’.
D.Create an event hub from the Azure Portal.
E.From the Log Analytics workspace, modify Log management settings.

Answer: A & D 

https://docs.microsoft.com/en-us/azure/azure-monitor/platform/platform-logs-overview