Notes-and-Resources.md

Storage space per EventID

A good method to help identify and eliminate costs is to determine which specific EventIDs to capture from agented systems versus collected every EventID. It varies, but each Event is between 500-600 bytes in size.

Pricing Calculators

The general Azure pricing calculator. Filter by Azure Sentinel. https://azure.microsoft.com/en-us/pricing/calculator/

Azure Sentinel pricing page: https://azure.microsoft.com/en-us/pricing/details/azure-sentinel/