Move Your Microsoft Sentinel Logs to Long-Term Storage with Ease

Rob_Walker Unfortunately there is a size limit for the API in the backend that hasn't been improved since this was made. The recommendation outside of lowering the time chunks is to have an export playbook for the different device vendors (Cisco, CheckPoint, etc) to move those logs by themselves in order to cut down on the total number of logs to move per run. 

Hopefully this helps but unfortunately with the API limitations in place there is no permanent solution. I would recommend looking into the continuous export feature moving forward for new data. 

Log Analytics workspace data export in Azure Monitor (preview) - Azure Monitor | Microsoft Docs