Log Analytics timegerated difference

Sergei Kiselev 66 Reputation points
2021-03-12T15:28:38.033+00:00

Hi,

Could someone explain me the difference please?
When I'm run query:

search *
| where TimeGenerated < ago(7d)
| count

I got the result: 300 000
When I'm running the same query, but setting timerange in the interface, I got the result: 100 000

77313-image.png

I don't understand what's the difference. Why I got so different results?

Azure Monitor
Azure Monitor
An Azure service that is used to collect, analyze, and act on telemetry data from Azure and on-premises environments.
3,014 questions
0 comments No comments
{count} votes

Accepted answer
  1. Vaibhav Chaudhari 38,681 Reputation points
    2021-03-12T16:12:58.06+00:00

    In first result with where clause, you get the data which is generated before 7 days i.e. before 5-March...

    In next query, you are trying to get the data for last 7 days i.e. data generated in between 5-March to today (12-March)


    Please don't forget to Accept Answer and Up-vote if the response helped -- Vaibhav

    2 people found this answer helpful.

0 additional answers

Sort by: Most helpful