Forum Discussion
Solved
Microsoft Sentinel Pricing Factors
The major ways Sentinel pricing can be affected: Size of logs ingested per day Type of logs Location of Log Analytics deployment Number of E5, A5, F5 and G5 licenses Free Data Sources Log D...
Can I suggest a update to:
"We can choose per data source the time we want it to be stored for our searching. The default is set to 730 days"
The default is 30days free retention in Log Analytics, however for a Sentinel Workspace, you can increase that free retention to 90days (you have to opt in to this). Analytic logs can be further retained for up to 730days (but this requires a retention cost per GB).
Can I suggest a update to:
"We can choose per data source the time we want it to be stored for our searching. The default is set to 730 days"
The default is 30days free retention in Log Analytics, however for a Sentinel Workspace, you can increase that free retention to 90days (you have to opt in to this). Analytic logs can be further retained for up to 730days (but this requires a retention cost per GB).
Clive_Watson thanks for pointing that out.