security alerts cannot be filtered by createdDateTime via Graph OData API

by Yi Liu   Last Updated October 10, 2019 04:01 AM - source

I am doing a poc. In the poc, there is an alert which createdDateTime=2019-09-25T01:34:37.72Z. I am able to query it via https://graph.microsoft.com/v1.0/security/alerts?$top=1

I expect the API should return empty list when i do https://graph.microsoft.com/v1.0/security/alerts?$filter=createdDateTime gt 2019-10-01T00:00:00.00Z and createdDateTime lt 2019-10-05T00:00:00.00Z. However, the alert was still returned.

Please advice me what i missed.

Thanks

Tags : api


Related Questions