I am using the Azure Monitor Logs API connection to query logs from a Logic App and want to set a custom time range for the query. 
I have looked for documentation on how to format the time range input string but have not been able to figure it out. Does anyone have any insight?
Thank you!
Hello @JasonKronickCA-1429 - Welcome to Microsoft Q&A and thanks for reaching out.
You can set the time range in the query itself if you want to use any other values from the predefined value in the Time Range. The Time Range value will be changed to "Set in query"
Hope this helps. and please feel free to reach out if you have any further questions.
If the above response was helpful, please feel free to "Accept as Answer" and "Upvote" the same so it can be beneficial to the community.
Thanks so much for the answer. I had tried doing that earlier but due to the complexities of the queries there wasn't a way to add that where clause. I tried adding it to the end of the queries but some had some complex joins and would fail due to a syntax error when I added it to the end. It seems like providing a custom time range is the only option unless there is a way to add a where clause to the end of the query without it ever causing an error. Any thoughts?
@JasonKronickCA-1429 - That is correct Jason. Providing custom range is the only option.
Hope that helps.
If the above response was helpful, please feel free to "Accept as Answer" and "Upvote" the same so it can be beneficial to the community.
Strange. It is supposed to revert to "Set in query" or a drop down menu with the option for a custom value. Pulling the query in as a variable may be the issue. Have you considered adding the query directly? Just paste it in the field provided.
It does revert to "Set in query" but the issue is, I can't add the "where TimeGenerated between ..." clause to the query because it doesn't look like, syntactically, you can just add a where clause to the end of any query.
Unfortunately, I can't edit the queries myself from the source so I have to bring them in as a variable. I can append to it in the field but again appending to the end seems to cause some issues.
If you print out the time value it has a specific format. I assume if you used an expression that produces the same date-time format or even hard code a value in another variable that might work.
Expression: formatDateTime(utcNow(), 'M/d/yyyy, hh:mm:ss:fff tt')
14 people are following this question.
