Update Azure Monitor Log stream setup instructions

As per [this discussion](https://developercommunity.visualstudio.com/t/Audit-streaming-for-Azure-monitor-is-br/11001356#T-ND11003431) in the Developer community

Author: bjompen

docs/organizations/audit/auditing-streaming.md

@@ -108,16 +108,23 @@ Once you have your Event Grid stream configured, you can set up subscriptions on
 ### Set up an Azure Monitor Log stream
 
 1. Create a [Log Analytics workspace](/azure/azure-monitor/learn/quick-create-workspace).
-2. Open the workspace and select **Agents**.
-3. Select **Log Analytics agent instructions** to view the workspace ID and primary key.
-4. Make note of the workspace ID and primary key.
-
-   :::image type="content" source="media/auditing-streaming/azure-monitor-log-keys.png" alt-text="Make note of workspace ID and primary key":::
-
-6. Set up your Azure Monitor log stream by proceeding through the same initial steps to create a stream.
-7. For target options, select **Azure Monitor Logs**.
+2. Open the workspace and select **Overview**.
+3. Make note of the workspace ID, Resource group, and Workspace name.
+4. Get the shared key in one of the following ways:
+  -  using PowerShell and the Az.OperationalInsights module
+   ```PowerShell
+   Get-AzOperationalInsightsWorkspaceSharedKey -ResourceGroupName <Resource group> -Name <Workspace name>
+   ```
+  - Using az cli
+   ```Azure CLI
+   az monitor log-analytics workspace create -g <Resource group> -n <Workspace name>
+   ```
+  - Using the [Get Shared Keys API](https://learn.microsoft.com/en-us/rest/api/loganalytics/shared-keys/get-shared-keys)
+ 
+5. Set up your Azure Monitor log stream by proceeding through the same initial steps to create a stream.
+6. For target options, select **Azure Monitor Logs**.
 
-8. Enter the workspace ID and primary key, and then select **Set up**. The primary key is stored securely within Azure DevOps and never displayed again in the UI. Rotate the key regularly, which you can do by getting a new key from Azure Monitor Log and editing the stream.
+7. Enter the workspace ID and primary key, and then select **Set up**. The primary key is stored securely within Azure DevOps and never displayed again in the UI. Rotate the key regularly, which you can do by getting a new key from Azure Monitor Log and editing the stream.
 
    :::image type="content" source="media/auditing-streaming/create-stream-azure-monitor-logs.png" alt-text="Enter workspace ID and primary key and then select Set up.":::