The scenario catches new users in Splunk and updates records in Azure Cosmos DB. Runs on its own, no manual copying.