Walk me through how you would troubleshoot a broken log ingestion pipeline where data is failing to populate in a customer's SIEM.