The scenario catches new users in Splunk and creates records in Azure Cosmos DB. Runs on its own, no manual copying.