Azure sentinel playbooks charges?

AsAdmin 396 Reputation points
2021-10-14T08:37:04.86+00:00

The different playbooks that we created seems to be charging more than few other resources. The account team has notified this to us. Is there a way to verify how much my automation charge per day per automation rule ? So that we can have a separate stats of how much we are getting charged.

Microsoft Sentinel
Microsoft Sentinel
A scalable, cloud-native solution for security information event management and security orchestration automated response. Previously known as Azure Sentinel.
975 questions
0 comments No comments
{count} votes

Accepted answer
  1. VipulSparsh-MSFT 16,231 Reputation points Microsoft Employee
    2021-10-14T13:05:13.913+00:00

    @AsAdmin Thanks for reaching out.

    Can you help us with what do you mean by more charges than others ? Do you see the charges being more than other days for a similar number of logic app run ?

    The playbook consists of the logic apps which costs when you run them and the kind of triggers you have that in logic app. One important thing to notice is check if someone added some extra step in logic app which can cause it to do something extra and thus charging you more.

    Logic apps gets stored in a storage account so you will be paying the storage account as well but that will be minimal. In your subscription if you filter it for per resource within subscription you can actually how much a particular logic app costs. You can even check that for per day.

    This is a screenshot from my lab environment : (This is when you have access to subscription cost blade.)

    140622-image.png

    Azure Sentinel also has a dedicated workbook for the cost it incurs including logic apps :

    140631-image.png

    -----------------------------------------------------------------------------------------------------------------

    Please remember to "Accept Answer" if any answer/reply helped, so that others in the community facing similar issues can easily find the solution.

    0 comments No comments

0 additional answers

Sort by: Most helpful