Script fails to fetch audit logs about sparrow HOT 3 CLOSED

I found similar behavior, though elected for a slightly different solution. You can use [DateTime]::UtcNow.AddYears(-1).AddHours(1) or [DateTime]::UtcNow.AddYears(-1).AddMinutes(60) to give the script an hour to run.

from sparrow.

What I think happens is that they accounted for the script not allowing queries over a year, but it's set at "1 year minus 10 minutes. If the script takes long enough to run, it eventually starts failing as the start date falls beyond that 10 minute window.
I had to work around by changing AddYears(-1) to AddDays(-364). I lose a bit of logs but it works better.

from sparrow.

I found similar behavior, though elected for a slightly different solution. You can use [DateTime]::UtcNow.AddYears(-1).AddHours(1) or [DateTime]::UtcNow.AddYears(-1).AddMinutes(60) to give the script an hour to run.

Do you want to submit a pull with this modification and we'll merge?

from sparrow.