LogVM Dedicated Logging Qube with Security Onion

Wondering if there are any significant advantages of any of the following configurations: hardware interfaces alone, virtual alone, or mixed?

A more in-depth guide on adding virtual interfaces to a VM would be useful…