Forum Discussion
Raw data connector pricing
Hello! I have been trying to find out an approximate overview for pricing for different connectors in Sentinel(if they are free, discounted, if the use a lot of data or not). My organization has...
There are a few lists like this one, to see which primary tables are free or billable (after Ingestion you can confirm with my Workbook or KQL https://docs.microsoft.com/en-us/azure/azure-monitor/platform/manage-cost-storage).
"If they use a lot of data or not" - is a 'it depends' answer, Azure Sentinel is based on "Azure Sentinel is billed based on the volume of data ingested for analysis in Azure Sentinel and stored in the Azure Monitor Log Analytics workspace. "
Source: https://azure.microsoft.com/en-us/pricing/details/azure-sentinel/
Your usage pattern maybe very different from others. I saw this recently with a company with a single firewall that was sending the same data volume as a customer with ~60 of the same appliances.