What do you mean by the "ATA Inisghts service"? not familiar with that one.
Maybe you meant the GW?
A good starting point would be to look in the logs as described here:
https://docs.microsoft.com/en-us/advanced-threat-analytics/troubleshooting-ata-using-logs
If you see any errors, upload here and we will try to help.