I am unclear on the costs for the P1 version of the product. P2 comes with 500MB of data ingestion, which suggests there could be a charge applied to P1 licenses which could vary depending on usage. Can somebody clarify this please? This used to be a simple license charge for MDE for servers, it now seems unnecessarily complex.
Hi Terry, short answer; no extra charge is expected. DFS P1 = MDES for servers (==MDE P2)
Detailed answer: Defender for servers (DFS) P1 provides the full entitlement as MDE for servers (MDES). Meaning, DFS P1 == MDE for servers. No extra charge for data ingestion should be expected there, no Log analytics solution storage or other data retention in workspace is required. DFS P1 is on a pay per use basis, for a maximum of 5$ per device per month. DFS P2, provides more than just MDES, as you can see here (https://learn.microsoft.com/en-us/azure/defender-for-cloud/plan-defender-for-servers-select-plan) DFS P1/MDE for servers doesn't use log analytics for storage at all (anymore)