0

I want to search my OMS logs for a specific date range

When I do:

search *

I see there are fields like Timestamp_t which are dates.

I wish to search for specific dates or ranges of dates. However I have tried every conceivable syntax I could find and try to obtain from documentation on google, and nothing has worked.

Thousands of variations of this kind of thing:

search * | where Timestamp_t > 2018-01-02

Could anybody advise me how to search between say, january 2nd at 3pm and january 4th at 11am? And if there is a super obvious guide to the syntax I can use somewhere? I tried this one but it didn't explain anything well enough to try https://www.stefanroth.net/2017/03/09/oms-log-search-cheat-sheet/

NibblyPig
  • 51,118
  • 72
  • 200
  • 356

1 Answers1

0

This worked for me:

Heartbeat | where TimeGenerated > datetime(2018-01-15)

Reference: https://docs.loganalytics.io/docs/Language-Reference/Data-types/datetime

kopieczek.dev
  • 706
  • 8
  • 26