Log Analytics timegerated difference

Sergei Kiselev 66 Reputation points


Could someone explain me the difference please?
When I'm run query:

search *
| where TimeGenerated < ago(7d)
| count

I got the result: 300 000
When I'm running the same query, but setting timerange in the interface, I got the result: 100 000


I don't understand what's the difference. Why I got so different results?

Azure Monitor
Azure Monitor
An Azure service that is used to collect, analyze, and act on telemetry data from Azure and on-premises environments.
3,014 questions
0 comments No comments
{count} votes

Accepted answer
  1. Vaibhav Chaudhari 38,681 Reputation points

    In first result with where clause, you get the data which is generated before 7 days i.e. before 5-March...

    In next query, you are trying to get the data for last 7 days i.e. data generated in between 5-March to today (12-March)

    Please don't forget to Accept Answer and Up-vote if the response helped -- Vaibhav

    2 people found this answer helpful.

0 additional answers

Sort by: Most helpful