Blog Post

Microsoft Sentinel Blog
7 MIN READ

Move Your Microsoft Sentinel Logs to Long-Term Storage with Ease

Matt_Lowe's avatar
Matt_Lowe
Icon for Microsoft rankMicrosoft
Feb 02, 2021
**UPDATE: Microsoft Sentinel now offers an easier and more efficient method to achieve long term storage. This solution is now out of date. Please refer to the recommended solution: What's New: Searc...
Updated Nov 06, 2023
Version 7.0
Eduards's avatar
Eduards
Copper Contributor
Oct 15, 2021

Hello,

 

I have a question. Is there possibility to create blobs not for 1 hour for (24h timestamp), but create one *.json blob for example divided in 12h. So in the end I will have
SecurityEvent-2021-07-16-12.json

SecurityEvent-2021-07-16-24.json

 

And when retrieving data from this json I will have to import 2 SAS URL which will have info for 07.16.2021