Announcing pricing changes to Azure Sentinel and Azure Monitor Log Analytics to help you save costs

Published Jun 02 2021 07:08 AM 6,577 Views

As a cloud-native SIEM, Azure Sentinel offers significant cost benefits. We have seen Azure Sentinel and the promise of cloud-native SIEM result in cost savings, both direct and indirect, for many of our customers. The 2020 commissioned Forrester Consulting Total Economic Impact™ of Microsoft Azure Sentinel study, for example, found that Azure Sentinel delivered a 48% reduction in costs compared to legacy SIEMs, saving on expenses like licensing, storage, and infrastructure costs.

 

Today, we are pleased to announce changes to the pricing of Azure Sentinel and Azure Monitor Log Analytics that will offer you additional cost savings. These changes take effect on June 2.

 

The changes include:

 

New capacity reservation naming

Capacity reservations are now called commitment tiers. You will see this change reflected in your user interface, in documentation, as well as on Azure Sentinel and Azure Monitor pricing pages and in the pricing calculator.

 

New, higher commitment tiers

We are introducing new commitment tiers for both Azure Sentinel and Azure Monitor Log Analytics for higher data ingestion: 1 TB/Day, 2 TB/Day, and 5 TB/Day.

 

Changes to how we bill for data ingestion over your commitment tiers

We are also changing the way we bill for overage. Data ingested beyond your selected commitment tier will now be billed using the effective commitment tier rate, instead of the Pay-as-you-go rate, resulting in a lower bill.

For example, for Azure Sentinel in the East US region, if you are on a 500 GB/day commitment tier, you will now be billed for overage at $0.80/GB (i.e. the effective rate for that tier) instead of the $2/GB pay-as-you-go rate.

 

Simplification of commitment tiers

We are simplifying commitment tiers to make them easier to manage. You can now select from eight distinct commitment tiers, per your needs, and no longer need to manage tiers due to minor changes in data ingestion patterns.

 

As part of this change, any workspaces with commitment tiers greater than 500 GB/day will be reset to the lowest available commitment tier – 500 GB/day, 1 TB/day, 2 TB/day, or 5 TB/day. This change should lower your costs due to the lowered cost of overage.

 

For example, if you were previously on a 600 GB/day commitment tier, your commitment tier would now be to 500 GB/day. Due to the change in overage billing, on days when you ingest more than 600GB, you would get billed at the 500GB effective tier rate, and on days you ingest less than 600GB, you save money because you are at a lower commitment tier – saving you costs overall.

 

Learn More

We’re excited to help you save costs with these changes, and look forward to continuing to innovate with Azure Sentinel and Azure Monitor Log Analytics. If you would like to learn more, please visit the Azure Sentinel pricing page or Azure Monitor Log Analytics pricing page. Thank you for being an Azure Sentinel and Azure Monitor Log Analytics user!

3 Comments
Occasional Contributor

Appreciate the competitive pricing.

But I never understood why MS can't stick to the names it starts off with.

Azure Monitor-LA was changed

ATP name's changed

This is now called that, that was previously called that..this statement is there so much in the docs.

I really hope Sentinel is not renamed to something cuter.

 

If we name a baby Jack, let's not call him John after he's 5 years old.

On a personal note, I really think 'Capacity Reservation' was a better suited term, but that's just my opinion.

However, if possible could you explain how this new name is better.

Am just interested in understanding what transpires in Teams calls when such decisions are taken.

Visitor

Agreed. And if you do insist on changing the names of things make sure it is consistent across all docs and portals. I'm fed up having to remember what stuff was called and align it to the new name.

Senior Member

Hi how do we get access to Azure Sentinel TCO analysis estimator of Forrester?

%3CLINGO-SUB%20id%3D%22lingo-sub-2408416%22%20slang%3D%22en-US%22%3EAnnouncing%20pricing%20changes%20to%20Azure%20Sentinel%20and%20Azure%20Monitor%20Log%20Analytics%20to%20help%20you%20save%20costs%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2408416%22%20slang%3D%22en-US%22%3E%3CP%3EAs%20a%20cloud-native%20SIEM%2C%20Azure%20Sentinel%20offers%20significant%20cost%20benefits.%20We%20have%20seen%20Azure%20Sentinel%20and%20the%20promise%20of%20cloud-native%20SIEM%20result%20in%20cost%20savings%2C%20both%20direct%20and%20indirect%2C%20for%20many%20of%20our%20customers.%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fwww.microsoft.com%2Fsecurity%2Fblog%2F2020%2F11%2F16%2Fforrester-tei-study-azure-sentinel-delivers-201-percent-roi-over-3-years-and-a-payback-of-less-than-6-months%2F%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EThe%202020%20commissioned%20Forrester%20Consulting%20Total%20Economic%20Impact%E2%84%A2%20of%20Microsoft%20Azure%20Sentinel%20study%3C%2FA%3E%2C%20for%20example%2C%20found%20that%20Azure%20Sentinel%20delivered%20a%2048%25%20reduction%20in%20costs%20compared%20to%20legacy%20SIEMs%2C%20saving%20on%20expenses%20like%20licensing%2C%20storage%2C%20and%20infrastructure%20costs.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EToday%2C%20we%20are%20pleased%20to%20announce%20changes%20to%20the%20pricing%20of%20Azure%20Sentinel%20and%20Azure%20Monitor%20Log%20Analytics%20that%20will%20offer%20you%20additional%20cost%20savings.%20These%20changes%20take%20effect%20on%20June%202.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThe%20changes%20include%3A%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3ENew%20capacity%20reservation%20naming%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%3ECapacity%20reservations%20are%20now%20called%20%3CSTRONG%3Ecommitment%20tiers%3C%2FSTRONG%3E.%20You%20will%20see%20this%20change%20reflected%20in%20your%20user%20interface%2C%20in%20documentation%2C%20as%20well%20as%20on%20Azure%20Sentinel%20and%20Azure%20Monitor%20pricing%20pages%20and%20in%20the%20pricing%20calculator.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3ENew%2C%20higher%20commitment%20tiers%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%3EWe%20are%20introducing%20%3CSTRONG%3Enew%20commitment%20tiers%3C%2FSTRONG%3E%20for%20both%20Azure%20Sentinel%20and%20Azure%20Monitor%20Log%20Analytics%20for%20higher%20data%20ingestion%3A%201%20TB%2FDay%2C%202%20TB%2FDay%2C%20and%205%20TB%2FDay.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3EChanges%20to%20how%20we%20bill%20for%20data%20ingestion%20over%20your%20commitment%20tiers%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%3EWe%20are%20also%20changing%20the%20way%20we%20bill%20for%20overage.%20%3CSTRONG%3EData%20ingested%20beyond%20your%20selected%20commitment%20tier%20will%20now%20be%20billed%20using%20the%20effective%20commitment%20tier%20rate%3C%2FSTRONG%3E%2C%20instead%20of%20the%20Pay-as-you-go%20rate%2C%20resulting%20in%20a%20lower%20bill.%3C%2FP%3E%0A%3CP%3EFor%20example%2C%20for%20Azure%20Sentinel%20in%20the%20East%20US%20region%2C%20if%20you%20are%20on%20a%20500%20GB%2Fday%20commitment%20tier%2C%20you%20will%20now%20be%20billed%20for%20overage%20at%20%240.80%2FGB%20(i.e.%20the%20effective%20rate%20for%20that%20tier)%20instead%20of%20the%20%242%2FGB%20pay-as-you-go%20rate.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3ESimplification%20of%20commitment%20tiers%20%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%3EWe%20are%20simplifying%20commitment%20tiers%20to%20make%20them%20easier%20to%20manage.%20You%20can%20now%20select%20from%20%3CSTRONG%3Eeight%20distinct%20commitment%20tiers%3C%2FSTRONG%3E%2C%20per%20your%20needs%2C%20and%20no%20longer%20need%20to%20manage%20tiers%20due%20to%20minor%20changes%20in%20data%20ingestion%20patterns.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EAs%20part%20of%20this%20change%2C%20any%20workspaces%20with%20commitment%20tiers%20greater%20than%20500%20GB%2Fday%20will%20be%20reset%20to%20the%20lowest%20available%20commitment%20tier%20%E2%80%93%20500%20GB%2Fday%2C%201%20TB%2Fday%2C%202%20TB%2Fday%2C%20or%205%20TB%2Fday.%20This%20change%20should%20lower%20your%20costs%20due%20to%20the%20lowered%20cost%20of%20overage.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EFor%20example%2C%20if%20you%20were%20previously%20on%20a%20600%20GB%2Fday%20commitment%20tier%2C%20your%20commitment%20tier%20would%20now%20be%20to%20500%20GB%2Fday.%20Due%20to%20the%20change%20in%20overage%20billing%2C%20on%20days%20when%20you%20ingest%20more%20than%20600GB%2C%20you%20would%20get%20billed%20at%20the%20500GB%20effective%20tier%20rate%2C%20and%20on%20days%20you%20ingest%20less%20than%20600GB%2C%20you%20save%20money%20because%20you%20are%20at%20a%20lower%20commitment%20tier%20%E2%80%93%20saving%20you%20costs%20overall.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3ELearn%20More%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%3EWe%E2%80%99re%20excited%20to%20help%20you%20save%20costs%20with%20these%20changes%2C%20and%20look%20forward%20to%20continuing%20to%20innovate%20with%20Azure%20Sentinel%20and%20Azure%20Monitor%20Log%20Analytics.%20If%20you%20would%20like%20to%20learn%20more%2C%20please%20visit%20the%20Azure%20Sentinel%20%3CA%20href%3D%22https%3A%2F%2Fazure.microsoft.com%2Fen-us%2Fpricing%2Fdetails%2Fazure-sentinel%2F%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Epricing%20page%3C%2FA%3E%20or%20Azure%20Monitor%20Log%20Analytics%20%3CA%20href%3D%22https%3A%2F%2Fazure.microsoft.com%2Fen-us%2Fpricing%2Fdetails%2Fmonitor%2F%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Epricing%20page%3C%2FA%3E.%20Thank%20you%20for%20being%20an%20Azure%20Sentinel%20and%20Azure%20Monitor%20Log%20Analytics%20user!%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-TEASER%20id%3D%22lingo-teaser-2408416%22%20slang%3D%22en-US%22%3E%3CP%3EToday%2C%20we%20are%20pleased%20to%20announce%20changes%20to%20the%20pricing%20of%20Azure%20Sentinel%20and%20Azure%20Monitor%20Log%20Analytics%20that%20will%20offer%20you%20additional%20cost%20savings.%3C%2FP%3E%3C%2FLINGO-TEASER%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2417572%22%20slang%3D%22en-US%22%3ERe%3A%20Announcing%20pricing%20changes%20to%20Azure%20Sentinel%20and%20Azure%20Monitor%20Log%20Analytics%20to%20help%20you%20save%20co%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2417572%22%20slang%3D%22en-US%22%3E%3CP%3EAppreciate%20the%20competitive%20pricing.%3C%2FP%3E%3CP%3EBut%20I%20never%20understood%20why%20MS%20can't%20stick%20to%20the%20names%20it%20starts%20off%20with.%3C%2FP%3E%3CP%3EAzure%20Monitor-LA%20was%20changed%3C%2FP%3E%3CP%3EATP%20name's%20changed%3C%2FP%3E%3CP%3EThis%20is%20now%20called%20that%2C%20that%20was%20previously%20called%20that..this%20statement%20is%20there%20so%20much%20in%20the%20docs.%3C%2FP%3E%3CP%3EI%20really%20hope%20Sentinel%20is%20not%20renamed%20to%20something%20cuter.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIf%20we%20name%20a%20baby%20Jack%2C%20let's%20not%20call%20him%20John%20after%20he's%205%20years%20old.%3C%2FP%3E%3CP%3EOn%20a%20personal%20note%2C%20I%20really%20think%20'Capacity%20Reservation'%20was%20a%20better%20suited%20term%2C%20but%20that's%20just%20my%20opinion.%3C%2FP%3E%3CP%3EHowever%2C%20if%20possible%20could%20you%20explain%20how%20this%20new%20name%20is%20better.%3C%2FP%3E%3CP%3EAm%20just%20interested%20in%20understanding%20what%20transpires%20in%20Teams%20calls%20when%20such%20decisions%20are%20taken.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2417606%22%20slang%3D%22en-US%22%3ERe%3A%20Announcing%20pricing%20changes%20to%20Azure%20Sentinel%20and%20Azure%20Monitor%20Log%20Analytics%20to%20help%20you%20save%20co%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2417606%22%20slang%3D%22en-US%22%3E%3CP%3EAgreed.%20And%20if%20you%20do%20insist%20on%20changing%20the%20names%20of%20things%20make%20sure%20it%20is%20consistent%20across%20all%20docs%20and%20portals.%20I'm%20fed%20up%20having%20to%20remember%20what%20stuff%20was%20called%20and%20align%20it%20to%20the%20new%20name.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2609731%22%20slang%3D%22en-US%22%3ERe%3A%20Announcing%20pricing%20changes%20to%20Azure%20Sentinel%20and%20Azure%20Monitor%20Log%20Analytics%20to%20help%20you%20save%20co%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2609731%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20how%20do%20we%20get%20access%20to%20Azure%20Sentinel%20TCO%20analysis%20estimator%20of%20Forrester%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E
Co-Authors
Version history
Last update:
‎Jun 03 2021 01:12 PM
Updated by: