Logship Logo

kusto ago operator

The ago operator returns a datetime of ‘time range’ in the past.

Details

ago(<time range>)

ago(3600) // No unit means seconds. This will specify now - 3600 seconds
ago(1h)   // Current time - 1 hour
table
| where PreciseTimestamp > ago(4h)