Microsoft Sentinel pricing calculator.
Enter your daily ingestion and retention. See what pay-as-you-go costs, which commitment tier is cheapest, and what moving noisy tables to the data lake saves. Microsoft's East US list prices as of 2026-09-28.
Cheapest option: 50 GB/day tier (preview promo)
- Analytics tier
- $4,902$1,634 a month less than pay-as-you-go ($6,536).
- Retention past 90 days
- $0Steady state, once the extra days are full.
- Data lake tier
- $0Nothing in the lake tier.
East US list prices from the Azure Retail Prices API, 2026-09-28. Excludes data lake queries, notebooks, graph, automation (Logic Apps), and negotiated discounts. Your region and agreement will change the numbers. Check Microsoft's own cost estimator before you commit budget.
Sentinel commitment tiers, East US.
Pay-as-you-go is $4.30 per GB. Each tier is a fixed daily fee. Usage above the tier bills at the same effective rate. Source: Azure Retail Prices API, 2026-09-28.
| Tier (GB/day) | Daily fee | Effective per GB | Saving vs pay-as-you-go |
|---|---|---|---|
| 50 (preview promo) | $161.25 | $3.23 | 25% |
| 100 | $296 | $2.96 | 31% |
| 200 | $548 | $2.74 | 36% |
| 300 | $800 | $2.67 | 38% |
| 400 | $1,037.33 | $2.59 | 40% |
| 500 | $1,265 | $2.53 | 41% |
| 1,000 | $2,480 | $2.48 | 42% |
| 2,000 | $4,800 | $2.40 | 44% |
| 5,000 | $11,550 | $2.31 | 46% |
| 10,000 | $22,240 | $2.22 | 48% |
| 25,000 | $53,450 | $2.14 | 50% |
| 50,000 | $102,600 | $2.05 | 52% |
For how the bill is built and where it blows up, read our Microsoft Sentinel pricing guide, or check Microsoft's billing documentation.
What people ask first.
- How is Microsoft Sentinel billed?
- Workspaces on simplified pricing (the default since July 2023) pay one per-GB price that covers both Log Analytics ingestion and Sentinel analysis. In East US that is $4.30 per GB at pay-as-you-go. Older workspaces can still be on classic pricing, which bills Log Analytics and Sentinel as separate meters. If a Sentinel meter on your invoice starts with "Classic", you are on classic pricing.
- When does a commitment tier pay off?
- A tier charges a fixed daily fee, and usage above it bills at the tier's discounted rate. The 100 GB/day tier costs less than pay-as-you-go from about 69 GB/day. The 50 GB/day preview promo tier breaks even at about 38 GB/day. You can move up a tier at any time. Moving down waits until the 31-day commitment period ends.
- What data is free in Sentinel?
- Azure Activity logs, Sentinel health data, Office 365 audit logs for SharePoint, Exchange admin and Teams, and security alerts and incidents from the Defender products. Raw logs are not free: Defender XDR advanced hunting tables and Microsoft Entra ID sign-in and audit logs are billable.
- When should a table go to the data lake tier?
- When you keep it for hunting, investigation or compliance rather than real-time detection. Firewall, proxy, NSG flow and DNS logs are the usual candidates. Lake-only tables cost $0.05 per GB to ingest plus $0.10 per GB processing, then storage per GB-month on compressed size. They are not used by real-time analytics rules.
- Is my input sent anywhere?
- No. The calculator runs in your browser. Nothing is sent to a server.
Want the estimate checked against your real workspace?
We read your Usage table, find the tables driving the bill, and show which ones belong in the data lake, which need a transformation rule, and which tier fits.