Hello All,
I have configured EventHub and getting old data . Previously when retention on Azure was 7 day's I use to see data of current date -7 when I reduce retention now its showing data of Current date -1 . I tried to check all the configs but not able to get any clue.
Splunk Version 7.2.9 and App used to configure Event Hub is Microsoft Azure Add On for Azure.