Planning and configuring Microsoft Sentinel
The first steps you need to take when planning to use Microsoft Sentinel for your organization are to open Microsoft Sentinel and then connect it to a workspace and thereby to your organization’s data sources. Microsoft Sentinel has several native Microsoft connectors that enable integration with other Microsoft services, such as Azure Active Directory, Office 365, Microsoft Defender for Identity, and Microsoft Defender for Cloud Apps (MDA). Ingestion from Microsoft connectors is free of charge.
It is also possible to configure Microsoft Sentinel to connect to non-Microsoft services, and use connection methods such as Syslog, REST API, or the Common Event Format (CEF). It is important to note that using non-Microsoft connections will incur ingestion charges. For more information on how to plan for and track your usage costs, use the Sentinel pricing calculator at https://learn.microsoft.com/en-us/azure/sentinel/billing?tabs=commitment...
