What should you do?

You create an Azure subscription named sub1.
In sub1, you create a Log Analytics workspace named workspace*!.
You enable Azure Security Center and configure Security Center to use workspace*!.
You need to colect security event logs from the Azure virtual machines that report to workspace 1.
What should you do?
A. From Security Center, enable data colection
B. In sub*!, register a provider.
C. From Security Center, create a Workflow automation.
D. In workspace*!, create a workbook.