KQL Query for finding out resource's egress going through a specific Virtual Network Gateway

Is there a way to find out individual resources egress that are going through a Virtual Network Gateway VPN.

Pretty much I have an issue where its been noticed that there's high egress going through our Azure to on-prem VPN, I believe it's due to backups but I want to find the specific resources that are causing it.

Is there a KQL or way of logging that would be able to pull the individual resource names or resource IDs based on their egress going through a Virtual Network Gateway?