Playbook pricing
As mentioned in Chapter 1, Getting Started with Microsoft Sentinel, running an Microsoft Sentinel playbook is not included in the ingestion costs of Microsoft Sentinel or Log Analytics. It has separate charges that, though they may be considered small, can add up quickly.
For example, in the East US region, each logic app action that is run (and this includes things such as looking up information, extracting JSON, and sending emails) will cost $0.000025 each time it is used. There is also an additional $0.000125 charge for each standard connector. Granted, this seems small, but if you write a logic app that has 100 actions with 1 connector that gets run every second of every day for a month, that one logic app would cost $3,564 each month!
Note
For more information on Azure Logic Apps pricing, go to https://azure.microsoft.com/en-us/pricing/details/logic-apps/.
Now, this is an extreme example, but it serves to remind you that when designing playbooks, you...