May this query help you:
AzureDiagnostics
| where TimeGenerated >= datetime(2024-01-24T00:00:00Z) and TimeGenerated < datetime(2024-01-25T00:00:00Z)
| where ResourceType == "AZUREFIREWALL"
| where Category == "FirewallDnsProxyLog"
| project TimeGenerated, SourceIP, DestinationIP, SentBytes, ReceivedBytes
| summarize TotalSentBytes = sum(SentBytes), TotalReceivedBytes = sum(ReceivedBytes) by SourceIP, DestinationIP
| order by TotalSentBytes desc
** Please don't forget to close up the thread here by upvoting and accept it as an answer if it is helpful **