Forum Discussion

Brass Contributor

Sep 29, 2019

Azure Sentinel pricing question for Azure and O365 sources

We had a question on the Azure Sentinel pricing that was made available last week with the GA. https://azure.microsoft.com/en-au/pricing/details/azure-sentinel/ Question What data can be ingest...

Nicholas DiCola (SECURITY JEDI)

Former Employee

Sep 30, 2019

Sayan Ghosh

To your second point, its just retention charge if you keep it more than 90 days.

GaryBushey
Bronze Contributor
Oct 11, 2019
Nicholas DiCola (SECURITY JEDI) What about the first part of the question?
If I have 1000GB of data being ingested daily with 200GB of it being from O365 am I paying for
A) 1000GB of data for Sentinel and 800GB for Log Analytics Ingestion
B) 800GB for Sentinel and 1000GB for Log Analytics Ingestion
C) 800GB for Sentinel and 800GB for Log Analytics Ingestion

Plus the 1000GB data retention after 90 days
- Nicholas DiCola (SECURITY JEDI)
  Former Employee
  Oct 11, 2019
  GaryBushey
  
  Option C is your answer. The free sources is for both LogA and Azure Sentinel.
  
  For retention, yes you would pay 1000GB.