Your organization uses Microsoft Defender for Cloud Apps. The security team wants to identify which unsanctioned cloud applications employees are using across the corporate network, based on traffic logs collected from your on-premises Palo Alto firewalls. They want a repeatable, automated process that keeps the discovery data continuously up to date rather than a one-time snapshot. What should you configure?