Forum Discussion

CyrilChu's avatar
CyrilChu
Copper Contributor
Jun 06, 2022
Solved

Pricing Calculator for Microsoft Sentinel

Hi everyone, I am using the Pricing Calculator for Microsoft Sentinel. I can see the pricing split into two parts - Azure Monitor and Microsoft Sentinel. In my understanding, Microsoft Sentinel wil...
azure
  • mikhailf's avatar
    mikhailf
    Jun 06, 2022

    Hello CyrilChu,

     

    The pricing is split into two parts - Azure Monitor and Microsoft Sentinel because:

    Azure Monitor is considered to be the "Ingestion" part (GB of logs that are ingested into Log Analytics Workspace) and Microsoft Sentinel is the SIEM system itself that operates logs, queries, workbooks, connectors etc.

mikhailf's avatar
mikhailf
Steel Contributor
Jun 06, 2022

Hello CyrilChu,

 

The pricing is split into two parts - Azure Monitor and Microsoft Sentinel because:

Azure Monitor is considered to be the "Ingestion" part (GB of logs that are ingested into Log Analytics Workspace) and Microsoft Sentinel is the SIEM system itself that operates logs, queries, workbooks, connectors etc.

  • CyrilChu's avatar
    CyrilChu
    Copper Contributor
    Jun 06, 2022
    Hello mikhailf,

    Can I simply understand it as Azure Monitor = Log Analytics Workspace (log data storage)?
    • mikhailf's avatar
      mikhailf
      Steel Contributor
      Jun 06, 2022

      CyrilChu 

       

      I understand it like this: Azure Monitor = Log Analytics Workspace (log data ingestion).
      Not storage. For Storage, Microsoft has another part in its calculator 🙂

      • CyrilChu's avatar
        CyrilChu
        Copper Contributor
        Jun 06, 2022
        mikhailf

        Thanks a lot, I have one more question.
        If I use Microsoft lighthouse to share the resource group (Microsoft Sentinel and Log Analytics Workspace) with another tenant, will it charge two Sentinel costs?

Resources