Skip to content

Commit f0a0362

Browse files
committed
remove-extra-blurb
1 parent ba22626 commit f0a0362

File tree

1 file changed

+0
-6
lines changed

1 file changed

+0
-6
lines changed

articles/active-directory/reports-monitoring/concept-activity-logs-azure-monitor.md

Lines changed: 0 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -57,15 +57,12 @@ Once you have your endpoint established, go to **Azure AD** and then **Diagnosti
5757

5858
If you already have an Azure AD license, you need an Azure subscription to set up the storage account and Event Hubs. The Azure subscription comes at no cost, but you have to pay to utilize Azure resources, including the storage account that you use for archival and the Event Hubs that you use for streaming. The amount of data and, thus, the cost incurred, can vary significantly depending on the tenant size.
5959

60-
Azure Monitor added a feature for ingestion time log transformation. Using this feature will allow customers to drop whole events or fields or parts of fields they don't need, saving them Azure Monitor/Sentinel/etc. costs
61-
6260
Azure Monitor provides the option to exclude whole events, fields, or parts of fields when ingesting logs from Azure AD. Learn more about this cost saving feature in [Data collection transformation in Azure Monitor](../../azure-monitor/essentials/data-collection-transformations.md).
6361

6462
### Storage size for activity logs
6563

6664
Every audit log event uses about 2 KB of data storage. Sign in event logs are about 4 KB of data storage. For a tenant with 100,000 users, which would incur about 1.5 million events per day, you would need about 3 GB of data storage per day. Because writes occur in approximately five-minute batches, you can anticipate approximately 9,000 write operations per month.
6765

68-
6966
The following table contains a cost estimate of, depending on the size of the tenant, a general-purpose v2 storage account in West US for at least one year of retention. To create a more accurate estimate for the data volume that you anticipate for your application, use the [Azure storage pricing calculator](https://azure.microsoft.com/pricing/details/storage/blobs/).
7067

7168

@@ -79,9 +76,6 @@ The following table contains a cost estimate of, depending on the size of the te
7976

8077
If you want to know for how long the activity data is stored in a Premium tenant, see: [How long does Azure AD store the data?](reference-reports-data-retention.md#how-long-does-azure-ad-store-the-data)
8178

82-
83-
84-
8579
### Event Hubs messages for activity logs
8680

8781
Events are batched into approximately five-minute intervals and sent as a single message that contains all the events within that timeframe. A message in the Event Hubs has a maximum size of 256 KB. If the total size of all the messages within the timeframe exceeds that volume, multiple messages are sent.

0 commit comments

Comments
 (0)