This is an old revision of the document!
Azure Sentinel
Costs
KQL for log volume
// Billable performance data over the last 30 days Usage | where TimeGenerated > ago(30d) | where IsBillable == true | summarize TotalVolumeGB = sum(Quantity) / 1024