Understand Sentinel costs

Microsoft Sentinel provides intelligent security analytics across your enterprise. The data for this analysis is stored in an Azure Monitor Log Analytics workspace. Billing is based on the volume of data ingested for analysis in Microsoft Sentinel and stored in the Azure Monitor Log Analytics workspace. There are two ways to pay for the Microsoft Sentinel service: Capacity Reservations and Pay-As-You-Go.

• Capacity Reservations: With Capacity Reservations, you're billed a fixed fee based on the selected tier, enabling a predictable total cost for Microsoft Sentinel.

• Pay-As-You-Go: With Pay-As-You-Go pricing, you're billed per gigabyte (GB) for the volume of data ingested for analysis in Microsoft Sentinel and stored in the Azure Monitor Log Analytics workspace.

For more information on pricing and a free trial of Microsoft Sentinel on an Azure Monitor Log Analytics workspace, visit Microsoft Sentinel pricing.