There are a couple ways to identify that the free benefit (https://aka.ms/SentinelOffer) for Microsoft 365 E5, A5, F5 and G5 customers has kicked in.
The first is the most obvious. We’ve included a Microsoft Sentinel Cost Workbook in the Microsoft Sentinel console that shows the applicable data flow.
But what if you want to review associated cost or cost savings from the benefit?
In the Cost Management + Billing app in the Azure portal, look at the Invoice Details in Cost Analysis. Set a filter by ‘Meter‘ and locate the ‘Free Benefit‘ options for M365 Defender Data Ingestion and M365 Defender Data Analysis.
For more, see: Understand your Microsoft Sentinel bill
[Subscribe to the RSS feed for this blog]
[Subscribe to the Weekly Microsoft Sentinel Newsletter]
[Subscribe to the Weekly Microsoft Defender Newsletter]
[Learn KQL with the Must Learn KQL series and book]