Sentinel Analytics Query Time Generated filter

Question

Hi,

When Sentinel Custom analytics query is built do we need to mention the time generated filter in query.

E.g:

If am writing a Custom analytics to Run query every 1 hour and look for data for last 1 hour do i still send to mention Time generated > ago(1h) in query ? i saw couple of gallery content with and without this Timegerated option

AuditLogs
| where Timegenerated > ago(1h)

Answer 1

https://learn.microsoft.com/en-us/azure/sentinel/detect-threats-custom#define-the-rule-query-logic-and-configure-settings