Pricing composition

%3CLINGO-SUB%20id%3D%22lingo-sub-1922742%22%20slang%3D%22en-US%22%3EPricing%20composition%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1922742%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20all%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20have%20only%20a%20short%20question%20about%20the%20pricing%20which%20is%20confusing.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ESo%20is%20it%20correct%20that%20the%20pricing%20is%20composed%20of%3C%2FP%3E%3CP%3E1.%20a%20fixed%20amount%20to%20pay%20for%20the%20instances%20we%20are%20monitoring%20with%20Azure%20Defender%3C%2FP%3E%3CP%3E2.%20additional%20costs%20for%20data%20ingested%20into%20the%20workspace%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIs%20that%20correct%20and%20which%20data%20are%20ingested%20into%20workspace%20(i%20know%20it%20is%20the%20case%20for%20VM's)%3F%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1944359%22%20slang%3D%22en-US%22%3ERe%3A%20Pricing%20composition%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1944359%22%20slang%3D%22en-US%22%3E%3CP%3EHi%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F725866%22%20target%3D%22_blank%22%3E%40marekatai%3C%2FA%3E%2C%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThanks%20for%20reaching%20out.%3C%2FP%3E%0A%3CP%3EWhen%20enabling%20Azure%20Defender%20for%20servers%20at%20the%20subscription%2C%20you%20been%20charged%20hourly%20for%20all%20running%20VMs%20that%20are%20protected%20and%20reside%20under%20this%20subscription.%3C%2FP%3E%0A%3CP%3EWhen%20enabling%20Azure%20Defender%20for%20servers%20at%20the%20Log-Analytics%20workspace%20level%20you'll%20be%20charged%20hourly%20for%20all%20reporting%20servers.%3C%2FP%3E%0A%3CP%3EWhen%20it%20comes%20to%20data%20ingestion%2C%20when%20enabling%20Azure%20Defender%20for%20servers%20at%20the%20Log-Analytics%20workspace%20level%2C%20you%20get%20free%20500MB%20data%20ingestion%20per%20server%20per%20workspace.%20The%20data%20ingested%20to%20that%20workspace%20is%20depends%20on%20the%20Solutions%20installed%20on%20that%20workspace.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EI%20hope%20things%20are%20clearer%20now.%3C%2FP%3E%0A%3CP%3EPlease%20let%20me%20know%20if%20I%20can%20be%20of%20any%20further%20assistance.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EBest%20regards%2C%3C%2FP%3E%0A%3CP%3EAmit.%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E
New Contributor

Hi all

 

I have only a short question about the pricing which is confusing.

 

So is it correct that the pricing is composed of

1. a fixed amount to pay for the instances we are monitoring with Azure Defender

2. additional costs for data ingested into the workspace?

 

Is that correct and which data are ingested into workspace (i know it is the case for VM's)? 

1 Reply

Hi @marekatai,

 

Thanks for reaching out.

When enabling Azure Defender for servers at the subscription, you been charged hourly for all running VMs that are protected and reside under this subscription.

When enabling Azure Defender for servers at the Log-Analytics workspace level you'll be charged hourly for all reporting servers.

When it comes to data ingestion, when enabling Azure Defender for servers at the Log-Analytics workspace level, you get free 500MB data ingestion per server per workspace. The data ingested to that workspace is depends on the Solutions installed on that workspace.

 

For more information on Azure Defender pricing, see: https://docs.microsoft.com/azure/security-center/security-center-pricing

 

I hope things are clearer now.

Please let me know if I can be of any further assistance.

 

Best regards,

Amit.