Azure unused resources which are older than 30 days

Question

I have the following KQL to find unused disks resources | where type has "microsoft.compute/disks" | extend diskState = tostring(properties.diskState) | where managedBy == "" | where not(name endswith "-ASRReplica" or name startswith "ms-asr-") Is there a way to modify the query and show unused disks which was created atleast 30 days before?

Answer 1

Hi Gayathri, Would this query work for you?

resources 
| where type has "microsoft.compute/disks" 
| extend diskState = tostring(properties.diskState)
| extend createdTimeStamp = properties.timeCreated
| where managedBy == "" 
| where not(name endswith "-ASRReplica" or name startswith "ms-asr-")
| where createdTimeStamp < now()-timespan(30d)