How to Locate the Microsoft Sentinel Free Benefit in Cost Management + Billing

There are a couple ways to identify that the free benefit ( for Microsoft 365 E5, A5, F5 and G5 customers has kicked in.

The first is the most obvious. We’ve included a Microsoft Sentinel Cost Workbook in the Microsoft Sentinel console that shows the applicable data flow.

Microsoft Sentinel Cost Workbook

But what if you want to review associated cost or cost savings from the benefit?

In the Cost Management + Billing app in the Azure portal, look at the Invoice Details in Cost Analysis. Set a filter by ‘Meter‘ and locate the ‘Free Benefit‘ options for M365 Defender Data Ingestion and M365 Defender Data Analysis.

Free Benefit

For more, see: Understand your Microsoft Sentinel bill


[Want to discuss this further? Hit me up on Twitter or LinkedIn]

[Subscribe to the RSS feed for this blog]

[Subscribe to the Weekly Microsoft Sentinel Newsletter]

[Subscribe to the Weekly Microsoft Defender Newsletter]

[Learn KQL with the Must Learn KQL series and book]