Forum Discussion

logger2115's avatar
logger2115
Brass Contributor
Feb 07, 2025

Data at rest Europe

Why in the world would MDE and XDR default ro Europe when our entire cloud services host oir of eastus?

Data at rest shows Europe instead of eastus which is oue default tenant. Also the fact that XDR setup failed to ask set region is biggest bug in this stack along with MDE.

what would have caused these two to get setup in europe and is thia configurable somewhere defender portal or other portal? I have read all the docs with only option would be to redo the entire setup. If we decided to start from beginning who holds the key to set desired region for all these modules? Is this EA, Tenant Admin, Microsoft Support?

also streaming logs inter continental from Europe to log analytics in eastus, whats the cost ingestion? I show  several pricing model but with my use case i need ti know dollar amount per gig for both.

 

Not happy how illusive defender operates if not careful during initial setup from admin perspective or it could have been microsoft that managed to click through without looking

 

  • luchete's avatar
    luchete
    Steel Contributor

    Hi logger2115!

    I guess your MDE and XDR setups defaulted to Europe instead of East US because of how the services were initially set up or region selection during the process. These defaults can sometimes be tied to the Microsoft data centers handling the deployment, even if your primary tenant is in East US.

    Unfortunately, as far as i know, once the initial setup is done, changing regions isn't always simple. You might need to redo the setup.

    As for streaming logs across continents, the cost for ingestion depends on the pricing model you choose and how much data you’re sending. To get the exact dollar per gig, you’ll need to check the detailed pricing for Log Analytics in the Defender portal or Azure pricing documentation.

    It can get tricky, especially if the region selection wasn't clear during the setup.

    • logger2115's avatar
      logger2115
      Brass Contributor

      Thanksluchete 

      the billing on and cost management is even more confusing. Curious where to find size and cost of transfer from xdr log transport to another workspace to assess dollar per dollar on stream of gb. 

      • luchete's avatar
        luchete
        Steel Contributor

        It can definitely be confusing to track. To get the size and cost of transferring XDR logs to another workspace, you’ll want to check the Azure Cost Management + Billing section.

        In the portal, look for details about the data transfer between workspaces, and check the specific pricing for log transport under the Log Analytics section. It’ll give you a breakdown of how much data is being transferred and the associated costs per gigabyte.

        For the most accurate cost estimation, you may need to review the Azure Pricing Calculator to get a clear picture based on your specific use case.

Resources