Significant drops in logs within your Azure Log Analytics Workspace are typically caused by a daily ingestion cap that limits the amount of data that can be ingested in a day. Once this cap is reached, the workspace stops ingesting additional data until the next day, which can result in missing logs.
To address this issue, you should increase the daily ingestion cap for your Log Analytics Workspace. This adjustment will ensure continuous data ingestion and help prevent any logs from being missed.
For detailed instructions on how to configure the daily cap, please refer to the following Azure documentation.
Resources:
- Azure Monitor Logs Limits
- Configure Daily Cap for Log Analytics Workspace
- Azure Monitor Logs cost calculations and options
Please do not forget to "up-vote" wherever the information provided helps you, as this can be beneficial to other community members.