Event banner
Microsoft Sentinel Data Tiering Best Practices - Tech Community Live!
Event Ended
Tuesday, Oct 29, 2024, 09:00 AM PDTEvent details
Discover the power of the new Auxiliary logs tier (Public Preview) and learn how to use Summary rules (Public Preview) to summarize data from any log tier in Microsoft Sentinel and Log Analytics. We’ll explore the potential of these features and provide you with practical ideas and use cases to help you save on ingestion costs and extract more value from your verbose logs.
Ask your questions down below and the on-camera Subject Matter Experts will do their best to answer during the live hour after their presentation!
TrevorRusher
Updated Dec 27, 2024
23 Comments
- What is the story of the Basic Logs, in this case? It's not mentioned here. Is the Basic Logs tier going away in the future?
- Didier-MSFT
Microsoft
There are no plans to retire basic logs, but we expect customers to choose auxiliary logs over basic due to cost as we work on the limitations we have today for Auxiliary, such as no transformations- Thanks, Didier, for the clarification. So, for directing customers to choose auxiliary logs over basic logs due to cost, once the current limitations for auxiliary logs are addressed, we don't see a scenario for using Basic logs anymore, except it's a bit faster in terms of performance.
- TrevorRusher
Community Manager
Session is starting! Enjoy and be sure to ask any questions you have down here in the comments section (in new threads please). - TrevorRusher
Community Manager
The session will begin soon! Looking forward to seeing the presentation and any questions you all have! - I will be there !