Microsoft archiver
For steps to configure this, please follow this document. In order to configure tables to be in the basic ingestion tier, the table must be supported and configured for data collection rules for custom logs.
MICROSOFT ARCHIVER ARCHIVE
Additionally, if data is configured for archival and the workspace retention (say 180 days) is lowered (say 90 days), the data between the original and new retention settings will automatically be rolled over into archive in order to avoid data loss. This is set by taking the totalRetentionInDays and subtracting the workspace retention.ĭata tables that are configured for archival will automatically roll over into the archive tier after they expire from the workspace. archiveRetention: the number of days that the data should be kept in archive.totalRetentionInDays: the total number of days that data should be retained within Azure Log Analytics.retentionInDays: the number of days that data is kept within the Microsoft Sentinel workspace.This introduces a few new retention policies to keep track of: The archive tier will allow users to configure individual tables to be retained for up to 7 years. Note: More sources will be supported over time. Note: this data will not be available for analytic rules or log alerts.ĭuring public preview, basic logs will support the following log types: project – including all its variants (project-away, project-rename, etc.).The following will be supported at launch:
![microsoft archiver microsoft archiver](https://microsofttrends.com/wp-content/uploads/2022/07/Windows-11-Android-Subsystem-WSA-1.jpg)
MICROSOFT ARCHIVER FULL
Rather than pay full price for these logs, they can be configured for basic ingestion pricing and move to archive after the 8 days. As mentioned above, the data ingested will only be retained in the workspace for 8 days and will support basic KQL queries.
![microsoft archiver microsoft archiver](https://slimindeklas.nl/wp-content/themes/slimindeklaswc/assets/statics/BreensNetwork.png)
This tier is meant for data sources that are high in volume, low in priority, and are required for ingestion. The basic log ingestion tier will allow users to pick and choose which data tables should be enrolled in the tier and ingest data for less cost.
![microsoft archiver microsoft archiver](https://knowinsiders.com/stores/news_dataimages/minhlt/092021/11/12/3004_convert-1_4.png)