I hope this KQL can help you to find the reason for HIRO.
// Query to identify operations contributing to Hot Iterative Read Operations
AzureDiagnostics
| where Category == "AzureDataLakeStorage"
| where OperationName == "ReadFile" or OperationName == "GetFileProperties" // Operations of interest
| summarize TotalOperations = count() by OperationName, bin(TimeGenerated, 1d)
| order by TimeGenerated asc