Monitoring traffic to and from private endpoints

looking to see what IP's are connecting (or attempting) to connect to a PaaS resource on a private endpoint. have tried virtual flow logs, but does not appear to show anything.  any tips?