Forum Discussion
Is there a minimum cost for Sentinel?
Hello, I'd like to use Sentinel in a SMB environment.
We should process about 5-10 GB of data every month: using the pay-as-you-go tier, the cost should be very low, assuming a 5$ per GB.
I was wondering if Sentinel has a minimum price to pay, when the logs volume is very low.
Thanks in advance.
- You can go to the Microsoft Sentinel pricing page (https://azure.microsoft.com/en-us/pricing/details/microsoft-sentinel/?OCID=AID2200277_SEM_2298c68f60551b508b0fa4fa660c49a7:G:s&ef_id=2298c68f60551b508b0fa4fa660c49a7:G:s&msclkid=2298c68f60551b508b0fa4fa660c49a7) to see the pricing. Note that there are also some free data sources
- PAYG is based on the GB consumed (actually its calculated in bytes), so you pay for what you use. However if you extend the data retention beyond 3 months, or enable UEBA or use a Playbooks/Logic App or use Notebooks - then there are other costs (I may not have listed them all!).
Clive_Watson Thanks for your answer!
A 90 days retention period will be enough and I don't think we are going to use UEBA, at least for now.
- How come you don't want to use UEBA? it provides some nice enhancements
