link<\/a><\/p>\n <\/p>\n
Another example, similar to the ones in Post 1 would be:<\/p>\n
\/\/ 31days of info, shown by MB and total GB \nlet daystoSearch = 31d; \nunion withsource = tt * \n| where TimeGenerated > startofday(ago(daystoSearch)) \n| where _IsBillable == True \n| summarize \nRecordCount=count(), \nMBperRecord = round(sum(_BilledSize \/ (1024 * 1024)) \/ count(),4), \nTotalGBytes = round(sum(_BilledSize \/ (1024 * 1024 * 1024)),4) \nby SolutionName = tt \n| sort by TotalGBytes desc<\/p>\n
Azure Sentinel pricing estimates require you to know your GB number (if you have the data in Log Analytics)<\/p>\n
\n\/\/Disclaimer: All prices shown are in USD ($). This is a summary estimate, not a quote. \nlet aap = 2.30; \/\/Add Azure Pricing ($ USD) source: https:\/\/azure.microsoft.com\/en-us\/pricing\/details\/monitor\/ \nlet daystoSearch = 31d; \/\/ Enter, how many days worth of data to look at? \nunion withsource = tt * \n| where TimeGenerated > startofday(ago(daystoSearch)) \n| where _IsBillable == True \n| summarize \nTotalGBytes =round(sum(_BilledSize\/(1024*1024*1024)),2), \nEstimatedCostUSD=round(aap * sum(_BilledSize\/(1024*1024*1024)),2), \nOldestRecord=min(TimeGenerated), NewestRecord=max(TimeGenerated) \nby Solution=tt \n| sort by TotalGBytes desc \n| summarize TotalGB=sum(TotalGBytes), TotalCost=sum(EstimatedCostUSD) \n<\/code><\/p>\n","protected":false},"excerpt":{"rendered":"Part1: https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/cross-industry\/2019\/03\/28\/azure-log-analytics-looking-at-data-and-costs\/ Part2: This post Part3 Part4: Sometimes you get an obvious question but it takes a while to work through the details, in this case Vlad wanted to know how much data each Service EndPoint Monitor (NPM) Test produced and the cost. So this is a modified version of my KQL code from part1.<\/p>\n","protected":false},"author":424,"featured_media":17586,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"ep_exclude_from_search":false,"_classifai_error":"","footnotes":""},"categories":[1],"post_tag":[128,424],"content-type":[],"coauthors":[],"class_list":["post-11166","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cross-industry","tag-azure","tag-hybridcloud"],"yoast_head":"\n
Azure Log Analytics: looking at data and costs - Part 2 - Microsoft Industry Blogs - United Kingdom<\/title>\n \n \n \n \n \n \n \n \n \n \n \n\t \n\t \n\t \n \n \n\t \n\t \n\t \n