Forum Discussion

Pramodkm's avatar
Pramodkm
Copper Contributor
Sep 19, 2022

Sentinel workspace

Hello, If all the Virtual machines are connected to a Sentinel workspace and at the same time I have enabled Defender for Cloud for Virtual Machines, will this make the mma agent in the VMs report...
analytics
azure
integration
microsoft defender for cloud
Rod_Trent's avatar
Rod_Trent
Icon for Microsoft rankMicrosoft
Sep 19, 2022
You should have Defender for Cloud and Microsoft Sentinel sharing the same workspace.
  • SergioT1228's avatar
    SergioT1228
    Brass Contributor
    Jan 17, 2023
    Hello Rod_Trent, just to clarify. We should set our continuous export log analytics workspace as the same workspace set for Sentinel?
    Cheers
  • Pramodkm's avatar
    Pramodkm
    Copper Contributor
    Sep 19, 2022
    Thanks Rod_Trent, but from a cost perspective Sentinel pricing will be applicable to all the logs that are ingested from Defender for cloud some of which might not have any security value right?
    • GBushey's avatar
      GBushey
      Former Employee
      Sep 26, 2022
      That is correct. You will need to decide how much of that extra data is being ingested compared to the value of other data being available to Sentinel

Resources