Why does the following kusto query display 2 results in different environments?
This query below while testing in log analytics workspace gives no records in output. However, when deployed in prod environment ie. when alert is activated it creates alert incidents. When I run the exact query with same timestamp as that of prod run, no output gets displayed. What could be the reason for it and what could be a possible fix?