Hi Community,
I am using Microsoft sentinel and in my log analytic workspace i have 90 days data retention policy.
as per the requirement, we want 90 days data should be online and 9 months data should be offline, means it should be archived or moved to some storage device.
could someone please help me how i can move the data from log analytic work that is older than 90 to Blob storage.
what are the pre-requisites for it.
how can i query the data if it is moved to blob storage.
how can we move the entire table to blob storage, or we can exclude the table like heartbeat table.
is there any other recommended solution rather than moving it to the blob storage.
Thanks
