SOLVED

Azure Sentinel Entity behavior analytics (UEBA) cost

%3CLINGO-SUB%20id%3D%22lingo-sub-1901288%22%20slang%3D%22en-US%22%3EAzure%20Sentinel%20Entity%20behavior%20analytics%20(UEBA)%20cost%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1901288%22%20slang%3D%22en-US%22%3E%3CP%3EI'm%20very%20excited%20to%20try%20out%26nbsp%3BAzure%20Sentinel%20Entity%20behavior%20analytics%20that%20just%20recently%20made%20it%20to%20GA%20(in%20EU%20west).%20I'm%20however%20unable%20to%20find%20if%20this%20will%20increase%20the%20cost%20of%20Sentinel.%20I'm%20assuming%20not%20unless%20I%20end%20up%20bringing%20in%20more%20data%20of%20course%20since%20the%20cost%20is%20calculated%20by%20the%20amount%20of%20data%20ingested.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIs%20anyone%20able%20to%20point%20me%20in%20the%20right%20direction%20or%20does%20anyone%20have%20experience%20to%20share%20about%20the%20subject%3F%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1901288%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAzure%20Sentinel%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EEntity%20Behavior%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EUEBA%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1902708%22%20slang%3D%22en-US%22%3ERe%3A%20Azure%20Sentinel%20Entity%20behavior%20analytics%20(UEBA)%20cost%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1902708%22%20slang%3D%22en-US%22%3EFrom%20my%20experience%2C%20the%20extra%20cost%20is%20negible.%20For%201000%20users%2C%20this%20was%20less%20than%205%20euro%3C%2FLINGO-BODY%3E
Occasional Contributor

I'm very excited to try out Azure Sentinel Entity behavior analytics that just recently made it to GA (in EU west). I'm however unable to find if this will increase the cost of Sentinel. I'm assuming not unless I end up bringing in more data of course since the cost is calculated by the amount of data ingested. 

 

Is anyone able to point me in the right direction or does anyone have experience to share about the subject? 

1 Reply
Best Response confirmed by Ivooo (Occasional Contributor)
Solution
From my experience, the extra cost is negible. For 1000 users, this was less than 5 euro