We have noticed Azure nsg flow logs are not consistently being ingested via Splunk Add-on for Microsoft Cloud Services. there were some missing logs on the past time.
For troubleshooting we'd like to know
Q1.When to change the add-on setttings log level below to "DEBUG", (whether we need to disable input status on "Inputs" before or not)
Q2. Does this change above will apply to all logs we are currently ingesting including internal logs?
