Logic App - Stange Behavior

Hello team
I have a strange behavior in logic app that I would like to share with you.
I happen to be trying to use KQL with Azure monitor to get more information with my alerts in microsoft sentinel, but it turns out that when I run it manually the logic app works from incidents in Sentinel it works fine, but if I leave it as automatic it doesn't give me any value ..look at it (query)when running it automatically:

when run manual 

is the same query executed in the same time period... any idea??