Forum Discussion

SebastiaanR's avatar
SebastiaanR
Brass Contributor
Aug 11, 2020

Sentinel Cost Estimation

Good evening community,   I need some help understanding the costing for Sentinel. I'm trying to build a case for Sentinel as a compete to an existing solution.   The environment has around 1000 ...
SebastiaanR's avatar
SebastiaanR
Brass Contributor
Aug 11, 2020

Thanks GaryBushey . I actually used that to determine the log sizes earlier today, thanks 🙂

Pardon my ignorance,

Let's assume I have my LA workspace with Sentinel on top of it. I have a server connected to this same workspace generating 50GB of logs per month. The same workspace is covered under Azure Security Center standard and as such this server is covered by Defender ATP.

Am I correct that Sentinel still sees the 50GB as ingested log volumes, and that is what will be counted against the consumption?

Thanks

 

 

 

 

 

  • Ofer_Shezaf's avatar
    Ofer_Shezaf
    Icon for Microsoft rankMicrosoft
    Aug 17, 2020

    GaryBushey , SebastiaanR : To clarify:

     

    - The free sources Gary mentions above are free for both the Sentinel cost and the Log Analytics ingestion cost. Only Log Analytics retention beyond 90 days is charged.

     

    - The 500MB/d free consumption allocation for Security Events for systems licensed for ASC standard applies but only to the Log Anaytics ingestion cost and not to the Sentinel cost. 

Resources