Blog Post

Microsoft Sentinel Blog
12 MIN READ

Microsoft Sentinel data lake FAQ

chaitra_satish's avatar
chaitra_satish
Icon for Microsoft rankMicrosoft
Sep 30, 2025

The Sentinel data lake is a game changer for security teams, serving as the foundational layer for agentic defense, deeper security insights and graph-based enrichment. In this blog we offer answers to many of the questions we’ve heard from our customers and partners on Sentinel data lake and billing.

On September 30, 2025, Microsoft announced the general availability of the Microsoft Sentinel data lake, designed to centralize and retain massive volumes of security data in open formats like delta ...
Updated Oct 03, 2025
Version 2.0
microsoft sentinel
repositories
security operations
siem
soar
threat detection and response
threat hunting
what's new
Lex9191's avatar
Lex9191
Copper Contributor
Oct 01, 2025

does someone know if sentinel data lake GA mode will fix the data residence disparity issues ? have a couple of tenants located in different regions than the sentinel workspaces. Dont mind waiting couple of weeks for this, otherwise will re-deploy new workspaces to match location

  • Lex9191's avatar
    Lex9191
    Copper Contributor
    Oct 04, 2025

    Hi - can confirm this has been fixed now

  • JulianGonzalez's avatar
    JulianGonzalez
    Icon for Microsoft rankMicrosoft
    Oct 01, 2025

    The Entra home region to workspace region mapping is no longer a requirement.

    • Lex9191's avatar
      Lex9191
      Copper Contributor
      Oct 02, 2025

      do you guys have an estimate time when this is going to be fully live ? still getting the ''you are currently ineligible for sentinel data lake'' message 

      • JulianGonzalez's avatar
        JulianGonzalez
        Icon for Microsoft rankMicrosoft
        Oct 13, 2025

        The rollout for that was slightly delayed but you should see that the mapping is no longer required.