Log Search Alert Rule Not Firing

I have an alert setup to fire when these conditions are satisfied-

call for a resource is received in last 4 days but not received in last 2 days.

query:

let resourcesReceivedInLast2Days = customEvents
    | where timestamp > ago (2d)
    | distinct resourceId;
customEvents
| where timestamp > ago(4d)
| where resourceId !in (resourcesReceivedInLast2Days) 
| distinct resourceId
| extend error = "Call not received for resource "
| project resourceId, error

My query is giving result when I run it in while editing alert rule.

Other config:

signal name = custom log search
query type = aggregate
measure = table rows
aggregation type = count
aggregation granularity = 2 days
operator = greater than or equal to
threashold:1
frequency of evaluation = 1d
In advance options
no of violations = 1
evaluation period = 2d
override query time range = 2d

Alert is being triggered when I set threshold as 0. My hunch is I am evaluating the query based on last 4 days but azure monitor provides query time range as max 2 days.

If this is some limitation from azure then please suggest some work around.