Event banner

Microsoft Sentinel Data Tiering Best Practices - Tech Community Live!

Event Ended
Tuesday, Oct 29, 2024, 09:00 AM PDT
Online

Event details

Discover the power of the new Auxiliary logs tier (Public Preview) and learn how to use Summary rules (Public Preview) to summarize data from any log tier in Microsoft Sentinel and Log Analytics. We’...
TrevorRusher
Updated Dec 27, 2024
microsoft sentinel
sylviahuang's avatar
sylviahuang
Copper Contributor
Oct 29, 2024
If we want to ingest the same logs into auxiliary logs instead of the current analytics logs, will they be stored in different tables? Are there any other considerations we need to be aware of when making the switch from analytics logs to auxiliary logs?
Matt_Lowe's avatar
Matt_Lowe
Icon for Microsoft rankMicrosoft
Oct 29, 2024
Entire tables can be set to be aux tier. This would keep the data within the native table. Custom tables will be needed for aux logs if you are looking to split data between analytics tier and aux tier.
Date and Time
Oct 29, 20249:00 AM - 10:00 AM PDT