We're running Splunk 8.2.2 with the Microsoft Azure Add-on version 3.1.1. We have the add-on installed on a heavy forwarder.
Most of the time the logs pull fine but every 1-2 months they stop pulling. If we let it sit for ~8 hours it eventually starts working again. If we disable then re-enable the pull it starts working right away.
What steps should we take next time this happens to troubleshoot why this is occurring?
