Merge pull request #185130 from nayef-yassin/patch-30

Update billing.md

Author: PRMerger20

articles/sentinel/billing.md

@@ -142,8 +142,11 @@ The following data sources are free with Microsoft Sentinel:
 - Azure Activity Logs.
 - Office 365 Audit Logs, including all SharePoint activity, Exchange admin activity, and Teams.
 - Security alerts, including alerts from Microsoft Defender for Cloud, Microsoft 365 Defender, Microsoft Defender for Office 365, Microsoft Defender for Identity, and Microsoft Defender for Endpoint.
-- Microsoft Defender for Cloud and Microsoft Defender for Cloud Apps alerts. However, raw logs for some Microsoft 365 Defender, Defender for Cloud Apps, Azure Active Directory (Azure AD), and Azure Information Protection (AIP) data types are paid.
+- Microsoft Defender for Cloud and Microsoft Defender for Cloud Apps alerts. 
 
+> [!NOTE]
+> Although alerts are free, the raw logs for some Microsoft 365 Defender, Defender for Cloud Apps, Azure Active Directory (Azure AD), and Azure Information Protection (AIP) data types are paid.
+> 
 The following table lists the free data sources you can enable in Microsoft Sentinel. Some of the data connectors, such as Microsoft 365 Defender and Defender for Cloud Apps, include both free and paid data types.
 
 | Microsoft Sentinel Data Connector   | Data type | Free or paid |
@@ -182,15 +185,6 @@ For more information about free and paid data sources and connectors, see [Conne
 > Data connectors listed as Public Preview do not generate cost. Data connectors generate cost only once becoming Generally Available (GA).
 >
 
-## Estimate Microsoft Sentinel costs
-
-If you're not yet using Microsoft Sentinel, you can use the [Microsoft Sentinel pricing calculator](https://azure.microsoft.com/pricing/calculator/?service=azure-sentinel) to estimate the potential cost of using Microsoft Sentinel. Enter *Microsoft Sentinel* in the Search box and select the resulting Microsoft Sentinel tile. The pricing calculator helps you estimate your likely costs based on your expected data ingestion and retention.
-
-For example, you can enter the GB of daily data you expect to ingest in Microsoft Sentinel, and the region for your workspace. The calculator provides the aggregate monthly cost across these components:
-
-- Log Analytics data ingestion
-- Microsoft Sentinel data analysis
-- Log Analytics data retention
 
 ## Manage and monitor Microsoft Sentinel costs
 

articles/sentinel/design-your-workspace-architecture.md

@@ -144,7 +144,7 @@ However, this recommendation for separate workspaces for non-SOC data comes from
 
   - If the data egress cost is enough of a concern to make maintaining separate workspaces worthwhile, use a separate Microsoft Sentinel workspace for each region where you need reduce the data egress cost.
 
-    <a name="note5"></a>[Decision tree note #5](#decision-tree): We recommend that you have as few workspaces as possible. Use the [Azure pricing calculator](billing.md#estimate-microsoft-sentinel-costs) to estimate the cost and determine which regions you actually need, and combine workspaces for regions with low egress costs. Bandwidth costs may be only a small part of your Azure bill when compared with separate Microsoft Sentinel and Log Analytics ingestion costs.
+    <a name="note5"></a>[Decision tree note #5](#decision-tree): We recommend that you have as few workspaces as possible. Use the [Azure pricing calculator](billing.md#estimate-costs-before-using-microsoft-sentinel) to estimate the cost and determine which regions you actually need, and combine workspaces for regions with low egress costs. Bandwidth costs may be only a small part of your Azure bill when compared with separate Microsoft Sentinel and Log Analytics ingestion costs.
 
     For example, your cost might be estimated as follows: