correct answer please
You are collecting events from Azure virtual machines to an Azure Log Analytics workspace. You plan to create alerts based on the collected even