Which KQL function filters to the last 24 hours?
- A ago(24h) (correct answer)
- B now(-24h)
- C datetime(24h)
- D startofday()
Shortcut: ago(24h) yields the timestamp 24 hours before now, so 'where timestamp > ago(24h)' scopes the query to the last day.
Shortcut: ago(24h) yields the timestamp 24 hours before now, so 'where timestamp > ago(24h)' scopes the query to the last day.