Forum Discussion

Pramodkm's avatar
Pramodkm
Copper Contributor
Sep 19, 2022

Sentinel workspace

Hello, If all the Virtual machines are connected to a Sentinel workspace and at the same time I have enabled Defender for Cloud for Virtual Machines, will this make the mma agent in the VMs report...
analytics
azure
integration
microsoft defender for cloud
Rod_Trent's avatar
Rod_Trent
Icon for Microsoft rankMicrosoft
Sep 19, 2022
You should have Defender for Cloud and Microsoft Sentinel sharing the same workspace.
Pramodkm's avatar
Pramodkm
Copper Contributor
Sep 19, 2022
Thanks Rod_Trent, but from a cost perspective Sentinel pricing will be applicable to all the logs that are ingested from Defender for cloud some of which might not have any security value right?
  • GBushey's avatar
    GBushey
    Former Employee
    Sep 26, 2022
    That is correct. You will need to decide how much of that extra data is being ingested compared to the value of other data being available to Sentinel

Resources