Monitoring traffic to and from private endpoints

looking to see what IP's are connecting (or attempting) to connect to a PaaS resource on a private endpoint.

have tried virtual flow logs, but does not appear to show anything. 

any tips?