Sample how to do it with qradar https://www.ibm.com/docs/no/dsm?topic=options-configuring-vnet-flow-logs-microsoft-azure-portal
Azure Event Hub
https://www.youtube.com/watch?v=Fdg03KBjDSk
https://www.ibm.com/docs/en/dsm?topic=options-microsoft-azure-event-hubs-protocol-configuration