Robert Cain continues a series on learning the Kusto Query Language:
The
agofunction is very similar to thenowfunction, which was discussed in my previous post Fun With KQL – Now. In this article we’ll take a look atago, see how it works and how it differs fromnow.We’ll be using both the
nowfunction in this post, so if you aren’t familiar with them please go read my articles Fun With KQL – Print and Fun With KQL – Now.
Click through for proper use of ago().