I had the same issue: This is an issue seen across the board, not just for Splunk ingestion, but also for Cloud Access Security Brokers such as Skyhigh Networks. If you want to solve your issue, place a detailed level B support ticket with Microsoft through the Azure support portal (portal.azure.com). You will likely see logs come back within 24 hours. ... View more