Microsoft Sentinel is a cornerstone of Microsoft Cloud Security Solutions, but to deliver proactive cyber threat detection, investigation, and response it needs logs from all the sources within your organization (servers, networking appliances, storage etc.). Collecting everything can be very expensive, so we want to show you how to optimize log collection, pay less, and stay secure. These are the real notes from the field.