Forum Discussion

Copper Contributor

Jun 27, 2022

Sentinel Billable data

Hello can you please help me understand difference of two queries we received from vendor deployin sentinel. We have logic app running daily this query to see billable data (to monitor if we are...

cost management

data collection

mikhailf

Steel Contributor

Jun 27, 2022

Hello T150732D ,

Instead of

| where TimeGenerated > ago(1d)

I would use:

| where StartTime >= startofday(ago(1d)) and EndTime < startofday(now())

I tried to use the queries you sent and got the same results. Will try to check it deeper and update you later.