Unofficial. Independent community helper — not a Microsoft product, not endorsed by Microsoft. Cost figures are planning estimates from public list pricing; verify Microsoft Sentinel pricing and entitlements with your Microsoft account team. The Microsoft Product Terms and Azure pricing are the source of truth.
Sentinel Optimizer
GitHub

Migrate to Sentinel with cost-optimal, private analysis

Analyze your current SIEM data to model Microsoft Sentinel spend, identify noisy or high-cost sources, and get prioritized migration and cost-optimization actions. All processing runs locally in your browser — no uploads, no credentials, no data exfiltration.

● 100% client-side parsing ● Migration planning + onboarding ● Cost model + provider comparisons ● Optional AI summary
1 · Provide data
// Microsoft Sentinel · Logs (Log Analytics) — run, then Export > JSON
Usage
| where TimeGenerated > ago(30d) and IsBillable == true
| summarize QuantityMB = sum(Quantity) by DataType
| order by QuantityMB desc

Paste the JSON rows from the Usage query (DataType + QuantityMB). Optional: data connectors.

Your pasted data is parsed entirely in your browser and never uploaded.