Could someone explain me the difference please?
When I'm run query:
| where TimeGenerated < ago(7d)
I got the result: 300 000
When I'm running the same query, but setting timerange in the interface, I got the result: 100 000
I don't understand what's the difference. Why I got so different results?