Log Analytics timegerated difference

Question

Hi,

Could someone explain me the difference please?
When I'm run query:

search *
| where TimeGenerated < ago(7d)
| count

I got the result: 300 000
When I'm running the same query, but setting timerange in the interface, I got the result: 100 000

I don't understand what's the difference. Why I got so different results?

Answer 1

In first result with where clause, you get the data which is generated before 7 days i.e. before 5-March...

In next query, you are trying to get the data for last 7 days i.e. data generated in between 5-March to today (12-March)

---

Please don't forget to Accept Answer and Up-vote if the response helped -- Vaibhav