How to Get Started with Basic Logs for Microsoft Sentinel

Cost is the topic of discussion for any SIEM or security tool that collects and analyzed data. Among a bevy of security announcements today, we also unveiled a long anticipated logs capability to enable archiving (or semi-cold storage) and cheaper long term storage.

See the following announcements for more information:

Get started learning about Basic Log capabilities:

There are even more valuable resource links in the new Search feature itself.

Guides & Feedback

Interested in how all the new log capabilities will affect pricing? The online pricing data and calculator has already been updated:


[Want to discuss this further? Hit me up on Twitter or LinkedIn]

[Subscribe to the RSS feed for this blog]

[Subscribe to the Weekly Microsoft Sentinel Newsletter]

[Subscribe to the Weekly Microsoft Defender Newsletter]

[Learn KQL with the Must Learn KQL series and book]


Leave a Reply