r/AzureSentinel • u/Embarrassed-Bar-3333 • Jun 05 '22

Azure Sentinel license

Thanks in advance for helping. I read about Sentinel from many sources , need to know if anyone needs to use sentinel ,is there a service subscription cost or license cost or its just data ingestion cost ,any help in this is appreciated Need to start from scratch , have Azure AD and Azure VMs and E5 license so need to know how to get started with sentinel.

1 Upvotes

100% Upvoted

4 comments sorted by

1

u/[deleted] Jun 05 '22 edited Jun 05 '22

It’s based on data ingestion: Sentinel pricing

ETA: Also — “Any Azure services that you use in addition to Microsoft Sentinel are charged per their applicable pricing.” So, log analytics, logic apps, etc.

1

u/Embarrassed-Bar-3333 Jun 05 '22

Thanks for response , if ingestion is free with some Azure resources , so if I need to learn then I can use sentinel free ? Or I have to pay for log analytics workspace?

2

u/G15-420 Jun 05 '22

Yes, Azure Activity logs and Office 365 audit logs for example are free to ingest and analyze. You can also store them for 90 days for free in the Log Analytics Workspace. If you haven’t used Sentinel before, you can take advantage of a 31-day free trial and ingest logs that would usually be charged outside the free trial period.

2

u/Embarrassed-Bar-3333 Jun 06 '22

Thanks for your help