Forum Discussion
sharukh222000
Nov 19, 2022Copper Contributor
Workspace and Sentinel how it will work
Dear All, I have my company server and worspace located in 3 regions i.e US, Europe and India and data is flowing from those specific locations to the respective workspace for example US data will...
samikroy
Nov 21, 2022MCT
1. If data compliance aggress, target the logs to a single workspace.
a. This will help you to query in a single workspace.
b. In case of a high data ingestion, you will be able to leverage commitment tiers.
3. Lighthouse is used in case of multi-tenancy which does not seem to be use case here.
This brings up another question what data sources being ingested
Heartbeat - Free
SecuityEvent - Will be billing same as of now.
Hope this helps.
a. This will help you to query in a single workspace.
b. In case of a high data ingestion, you will be able to leverage commitment tiers.
3. Lighthouse is used in case of multi-tenancy which does not seem to be use case here.
This brings up another question what data sources being ingested
Heartbeat - Free
SecuityEvent - Will be billing same as of now.
Hope this helps.