cost of "send Activity Log to Log Analytics Workspace"

roy 21 Reputation points
2022-08-22T09:04:08.53+00:00

Does it mean it is free usually? because data ingestion and retention is said no charges in the following document.
If yes, is it free even if retention policy of Log Analytice Workspace set 730 days?

Send to Log Analytics workspace
https://learn.microsoft.com/en-us/azure/azure-monitor/essentials/activity-log?tabs=powershell#send-to-log-analytics-workspace
---------
Incur no data ingestion or retention charges for activity log data stored in a Log Analytics workspace.
---------

Azure Monitor
Azure Monitor
An Azure service that is used to collect, analyze, and act on telemetry data from Azure and on-premises environments.
3,658 questions
0 comments No comments
{count} votes

Accepted answer
  1. Andrew Blumhardt 10,051 Reputation points Microsoft Employee
    2022-08-22T12:23:59.403+00:00

    You can make feedback requests on most Microsoft Learn. To your point, Activity Logs are your default subscription/resource audit logs. They are created and stored for 90 days in a default container. Platform metrics are stored in a similar default container. Think of them like free hidden workspaces. Customers can choose to mirror Activity Logs and Metrics to a customer-managed workspace, blob storage, or event hub. This gives you the ability to manage the location, consolidate with other data, and to better manage access and retention.

    Point being, Activity Logs are collected and stored for 90 days for free. There is no charge to mirror those logs to another storage location (there is no additional ingestion charge). But if the target workspace is set to retain the table for longer that 90 days, extended retention charges will apply.

    1 person found this answer helpful.

2 additional answers

Sort by: Most helpful
  1. Manu Philip 20,206 Reputation points MVP Volunteer Moderator
    2022-08-22T09:30:26.93+00:00

    There are comments under review on this confusing sentence in documentation (66802). Have a look at the highlighted points below:

    activity-log

    As the default duration is 90 days, If you cross the default duration, a cost is applicable
    However, no data ingestion or retention charges for activity log data stored in a Log Analytics workspace up to 90 days

    ----------

    --please don't forget to upvote and Accept as answer if the reply is helpful--

    0 comments No comments

  2. roy 21 Reputation points
    2022-08-22T10:20:52.987+00:00

    Hi @Manu Philip
    Thank you for the information.

    I am still confused.
    Is this description wrong too? I seem you say there is data ingestion charges if over 90 days.

    https://github.com/MicrosoftDocs/azure-docs/issues/66802

    the documentation I highlighted talks about both data ingestion and retention charges.
    I know there won't be any data ingestion charges. But data retention charges will be there if activity log is retained for more than 90 days.
    So, I think that one point should be updated in such a way that it clearly explains following points:

    ・No data ingestion charges for Activity log data stored in a Log Analytics workspace
    ・No data retention charges till 90 days for Activity log data stored in a Log Analytics workspace

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.