I try to list Exchange audit content between datest using Office 365 Management API.
I prepare request like this
But every time I get the same list of contents with contentCreated< than startTime.
If no any events I get the same list of contents, but if I have an amount of exchange events, returned content list is changed but contentCreated < that startTime.
From my point of view I should get content only with contentCreated >= than startTime or nothing.
Why I getting the content with contentCreated less that startTime?