Forum Discussion

Karen McGregor's avatar
Karen McGregor
Copper Contributor
Mar 25, 2019

O365/Azure AD Logs and Sentinel - what retention?

It's great to see data from O365/Azure AD ingested to Sentinel at no cost.    Does that mean that O365/Azure AD data retained beyond 31 days will be billable?
Ofer_Shezaf's avatar
Ofer_Shezaf
Icon for Microsoft rankMicrosoft
Mar 26, 2019
Yes. Only one month retention is free. By the way, I believe it is O365 only, not AAD data, which is free. I will check. that.
  • Karen McGregor's avatar
    Karen McGregor
    Copper Contributor
    Mar 26, 2019

    Thanks - important to check on Azure AD.

     

    Ofer_Shezaf 

    • Ofer_Shezaf's avatar
      Ofer_Shezaf
      Icon for Microsoft rankMicrosoft
      Mar 27, 2019

      I have confirmed and indeed only Office 365 logs are free.

Resources