Author : MD TAREQ HASSAN | Updated : 2022/02/07
Cost for Data in Log Analytics
- Ingested data is stored in Log Analytics workspace
- Microsoft Sentinel is billed based on the volume of data ingested for analysis in Microsoft Sentinel and stored in Azure Monitor Log Analytics workspace
Data Ingestion Cost (Japan East)
- Pay-As-You-Go: $3.34 per GB
- Commitment Tiers: https://azure.microsoft.com/en-us/pricing/details/monitor/#pricing
Data Retention Cost (Japan East)
- Free of charge for 90 days
- Beyond 90 days: $0.15 per GB per month
Log Data Export Cost (Japan East)
- If data is exported to destinations such as Azure Storage and Event Hub for longer retention, It will be billed per GB of data exported from the Log Analytics Workspace
- Cost: $0.145 per GB
Cost for Sentinel Data Analysis
- Sentinel is a SaaS service, it runs on Azure infrastructure that accrues costs when you deploy new resources
- Data is stored in Log Analytics Workspace, and then will be ingested to Sentinel for analysis
- Sentinel Ingestion cost for Japan East, Pay-As-You-Go tier: $2.90 Per GB/day
Cost for Playbook
Playbook is based on Logic App and will charged based on Logic App pricing model (Japan East):
- Actions: $0.000028 per action per run
- Standard Connector: $0.00013 per run
- Enterprise Connector: $0.001 per run
- Data retention: $0.12 GB/month
Total Cost
Total cost is the combination of follwoing costs:
- Cost for Data in Log Analytics
- Sentinel Data Analysis Cost
- Sentinel Playbook Cost
- “bring your own machine learning (BYOML) models” Cost
- Cost for Azure Notebooks
- Some of Microsoft Sentinel’s data connectors and solutions use Azure Functions for data ingestion, which also has a separate associated cost