Targeting Log Analytics Workspace (LAW) and Azure Event Hubs (AEH) for Azure SQL Audit log events has gone GA now. LAW opens up for querying the events, and as a result, more opportunity to discover beyond out of the box reports. AEH can be used to stream events to external appliances that you might be familiar with and have established governance around. LAW is easier to set up than Event Hubs. We have set up both of these at large clients and helped establish monitoring and alerting, with respect to the services in focus. Connect with us if you want to know more and we will be happy to share our experience.
Azure SQL Auditing to Log Analytics & Event Hubs now generally available