@Khoa Tran
Thank you for posting your query on Microsoft Q&A, from above description I could understand you are seeking advice on the pricing of using Log Analytics with Entra ID.
*Please do correct me if this is not as issue. *
As per Microsoft Entra activity logs with Log analytics prerequisites, to analyze activity logs with Log Analytics, you need:
- A Microsoft Entra tenant with a Premium P1 license
- A Log Analytics workspace and access to that workspace
- The appropriate roles for Azure Monitor and Microsoft Entra ID
Here Log Analytics is added as a separate Azure service (not included in Entra P1). To create a Log Analytics workspace, you need an Azure account with an active subscription and billing would be done based upon the plan as per https://azure.microsoft.com/en-in/pricing/details/monitor/.
***Please "Accept the answer (Yes)" and "share your feedback ". This will help us and others in the community as well.
Thanks,
Akshay Kaushik ***