Microsoft
MicrosoftHappy New Year Luizao_f
First off, Microsoft provides estimates using public facing tools with this disclaimer: Resulting data usage and prices are estimates only. Actual data usage and prices may vary depending upon many factors, including customer environment, date of purchase, currency of payment, and type of agreement with Microsoft, Region of data ingestion & retention & Pricing model. Accurately determining before actual usage is quite a daunting task because our cost model is primarily based on GBs ingested from sources that are both Microsoft & non-Microsoft so the more accurately you determine that the more closer you get to your consumption estimate. The best way to get an idea of future costs is to run a limited pilot with target data sources. However, the public-facing resources we currently have available to help you estimate usage are per below:
Cost drivers:
Azure Sentinel Ingestion: Azure Sentinel Pricing | Microsoft Azure
Log Analytics Ingestion: https://azure.microsoft.com/en-us/pricing/details/log-analytics/
Log Analytics retention: https://azure.microsoft.com/en-us/pricing/details/log-analytics/
Automation-Logic Apps: https://azure.microsoft.com/en-us/pricing/details/logic-apps/
Bring Your Own ML: https://azure.microsoft.com/en-us/pricing/details/machine-learning-studio/ & https://azure.microsoft.com/en-us/pricing/details/databricks/
UEBA-5-10% over and above cost of selected data sources
(Not a Microsoft resource) - Log point provide a public-facing calculator here but you would use it based on their own disclaimer terms SIEM Storage Calculator | LogPoint
For historical Azure Sentinel costs, this workbook would be useful: Usage reporting for Azure Sentinel - Microsoft Tech Community
If you are a Microsoft partner I would suggest you get in touch with your Microsoft rep, they would have access to some internal resources that can help you better size future consumption. Hope this helps