-werners-
Esteemed Contributor III

Ideally you can still read the event hub events, and see if the missing ones are there.  If so: it must be spark related.
If they are already gone, hard to tell.  I'd store the events in a raw table so you can do validity checks.}