Skip to content

Commit 41a8e00

Browse files
authored
Update daily-cap.md
Update with new Daily Cap behavior which is coming.
1 parent bc808dd commit 41a8e00

File tree

1 file changed

+8
-1
lines changed

1 file changed

+8
-1
lines changed

articles/azure-monitor/logs/daily-cap.md

Lines changed: 8 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -46,7 +46,14 @@ To help you determine an appropriate daily cap for your workspace, see [Azure M
4646

4747

4848
## Workspaces with Microsoft Defender for Cloud
49-
Some data security-related data types collected [Microsoft Defender for Cloud](../../security-center/index.yml) or Microsoft Sentinel are collected despite any daily cap, when the [Microsoft Defender for Servers](../../defender-for-cloud/plan-defender-for-servers-select-plan.md) solution was enabled on a workspace after June 19, 2017. The following data types will be subject to this special exception from the daily cap:
49+
50+
> [!IMPORTANT]
51+
> Starting September 18, 2023, the Log Analytics Daily Cap will no longer exclude the below set of data types from the daily cap, and all billable data types will
52+
> be capped if the daily cap is met. This change improves your ability to fully contain costs from higher-than-expected data ingestion.
53+
> If you have a Daily Cap set on your workspace which has [Microsoft Defender for Servers](../../defender-for-cloud/plan-defender-for-servers-select-plan.md),
54+
> be sure that the cap is high enough to accomodate this change. Also, be sure to set an alert (see below) so that you are notified as soon as your Daily Cap is met.
55+
56+
Until September 18, 2023, some data security-related data types collected [Microsoft Defender for Cloud](../../security-center/index.yml) or Microsoft Sentinel are collected despite any daily cap, when the [Microsoft Defender for Servers](../../defender-for-cloud/plan-defender-for-servers-select-plan.md) solution was enabled on a workspace after June 19, 2017. The following data types will be subject to this special exception from the daily cap:
5057

5158
- WindowsEvent
5259
- SecurityAlert

0 commit comments

Comments
 (0)