--- title: LogLocker for Microsoft Sentinel description: Retaining and preserving high-value logs doesn't need to be so difficult and expensive image: https://log-locker.com/hubfs/LogLocker_Reference_Architecture.png --- [![Screenshot 2023-10-10 at 10.34.54](https://log-locker.com/hubfs/Screenshot%202023-10-10%20at%2010.34.54.png)](https://log-locker.com?hsLang=en) - Features - [Collect & Store](https://log-locker.com/collect-store-compliance-data-interoperable-api-versioning-tagging?hsLang=en) - [Secure & Encrypt](https://log-locker.com/secure-encrypt-compliance-data?hsLang=en) - [Manage & Preserve](https://log-locker.com/manage-preserve-compliance-data?hsLang=en) - [Retrieve & Share](https://log-locker.com/retrieve-share-compliance-data?hsLang=en) - Use cases - [Financial services compliance](https://log-locker.com/uses-cases/financial-services-supervision-and-surveillance?hsLang=en) - [eDiscovery](https://log-locker.com/uses-cases/ediscovery-production-presentation-trust?hsLang=en) - [Data loss prevention](https://log-locker.com/uses-cases/data-loss-prevention-dlp?hsLang=en) - [Privileged access logs](https://log-locker.com/uses-cases/audit-trails-administrator-logs-privileged-access-logs?hsLang=en) - [Cybersecurity investigations](https://log-locker.com/uses-cases/cybersecurity-and-compliance-investigations?hsLang=en) - [LogLocker X Microsoft Sentinel](https://log-locker.com/loglocker-and-microsoft-sentinel-for-compliance?hsLang=en) - [Blog](https://log-locker.com/en/blog?hsLang=en) - [Contact us](https://log-locker.com/contact-us?hsLang=en) [GET A DEMO](https://log-locker.com/demo?hsLang=en) LogLocker for Microsoft Sentinel # Cost-effective, long-term archiving LogLocker is a long-term log storage solution for compliance teams, deployed as an app that augments Microsoft Sentinel. [Buy now](https://log-locker.com/loglocker-for-microsoft-sentinel#pricing) [Book a demo](https://meetings.hubspot.com/alex-cawthorne/marketplacediscoverycall) ![AdobeStock_588513155](https://log-locker.com/hubfs/AdobeStock_588513155.png "AdobeStock_588513155") ![Defense@2x](https://log-locker.com/hs-fs/hubfs/Defense@2x.png?width=2000&height=1686&name=Defense@2x.png "Defense@2x") ## The smart way for compliance teams to archive Microsoft Sentinel logs. LogLocker augments existing monitoring systems, like Microsoft Sentinel, providing compliance professionals with a smarter and more cost-effective way to retain enterprise activity logs. ## Blockchain backed data you can trust In regulated sectors, businesses need to avoid fines and reputational damage. Thanks to our proprietary blockchain platform FALKOR, LogLocker gives you superior redundancy, preservation, security, and data lineage capabilities built in. This guarantees tamper-proof, immutable compliance logs, the kind you know will stand up to scrutiny. ![Byzgen -Private Blockchain-1](https://log-locker.com/hs-fs/hubfs/Byzgen%20-Private%20Blockchain-1.png?width=1186&height=1291&name=Byzgen%20-Private%20Blockchain-1.png "Byzgen -Private Blockchain-1") The business case for LogLocker ## LogLocker solves compliance challenges by providing a robust log management platform for the data and AI economy Never has it been more important to retain **only** the necessary log data to reduce cost and storage complexity - if you retain logs for long periods its essential data lineage is preserved to ensure legal defensibility.   #### Shrink costs Shocked at the limited options and long-term cost of retaining your logs? Dramatically reduce your archiving costs with LogLocker #### Minimise data Wonder why you keep so much log data? LogLocker eliminates this inefficiency by effortlessly selecting only the logs you need, #### Reduce complexity Simplify the storage and preservation of your high-value compliance logs through LogLocker's automation and easy to navigate interface. #### Instant search LogLocker's powerful search features mean you can find your logs immediately instead of spending days running complex queries. #### Trustworthy AI Strengthen your governance and audit tactics, to build trust in AI technologies. LogLocker gives you control and records what happens with the data AI accesses and uses. #### Flexible and agnostic Want to bring in other data sources? No problem. LogLocker will work with any volume or type of data, log or query. #### Ready for integration LogLocker API's were designed for easy and effective integrations with Microsoft Sentinel, Log Analytics, Azure Data Explorer and other Microsoft services. #### No retraining LogLocker uses Kusto Query Language (KQL) to define the targeted log collections via Azure Sentinel allowing it to align to existing staff roles and skills. #### Extensible data sources Want to bring in other data sources? No problem. LogLocker will work with any volume or type of data, log or query. Getting started with LogLocker ## Where is LogLocker installed? ![azure icon logo](https://log-locker.com/hubfs/azure%20icon%20logo.png) #### Installed on Azure The LogLocker platform is deployed into your Azure subscription so you govern the security and location of your data using the configuration option provided. Includes Terraform, Kubernetes, Storage and Logic App. ![Azur regions](https://log-locker.com/hubfs/Azur%20regions.png) #### In any Azure region LogLocker can be deployed into any Azure region ensuring your data is stored on the blockchain network that respects your data sovereignty requirements ![azure-storage-table-logo-A474F6AD9A-seeklogo.com](https://log-locker.com/hubfs/azure-storage-table-logo-A474F6AD9A-seeklogo.com.png) #### Azure Blob storage options Larger data sets can extend to off-chain storage using Azure Blob storage. Further options for multi cloud storage are also available. Getting started with LogLocker ## How does LogLocker work? ![KQL](https://log-locker.com/hubfs/KQL.webp) #### Targeted protection Target the specific logs you want to capture using KQL queries run from Sentinel against Log Analytics and Azure Data Explorer. Then add the LogLocker automation to the query workbook. ![Sentinel](https://log-locker.com/hubfs/Sentinel.png) #### Sentinel triggers When a Sentinel alert is triggered, LogLocker will request the KQL and run the specific query against either the Log Analytics Sentinel workspace or Azure Data Explorer (ADX). ![Byzgen -Private Blockchain-1](https://log-locker.com/hubfs/Byzgen%20-Private%20Blockchain-1.png) #### Stored logs Only the logs you specify are stored and preserved in LogLocker, ready for search, sharing and review. [Buy LogLocker now](https://log-locker.com/loglocker-for-microsoft-sentinel#pricing) Ask a question ## LogLocker pricing #### Business ## from $2850/mo Best for smaller log volumes. Retain and manage your high-value logs quickly and easily --- - ![Checkmark](https://f.hubspotusercontent30.net/hubfs/8823337/Checkmark.svg) Single tenant - ![Checkmark](https://f.hubspotusercontent30.net/hubfs/8823337/Checkmark.svg) Sentinel connector - ![Checkmark](https://f.hubspotusercontent30.net/hubfs/8823337/Checkmark.svg) Private blockchain - ![Checkmark](https://f.hubspotusercontent30.net/hubfs/8823337/Checkmark.svg) On-chain storage - ![Checkmark](https://f.hubspotusercontent30.net/hubfs/8823337/Checkmark.svg) Elastic search [Buy LogLocker Business](https://portal.azure.com/#view/Microsoft_Azure_Marketplace/GalleryItemDetailsBladeNopdl/preview/undefined/id/byzgen1683884710094.loglocker-saas-uk/resourceGroupId//resourceGroupLocation//dontDiscardJourney~/false/_provisioningContext~/%7B%22initialValues%22%3A%7B%22subscriptionIds%22%3A%5B%5D%2C%22resourceGroupNames%22%3A%5B%5D%2C%22locationNames%22%3A%5B%5D%7D%2C%22telemetryId%22%3A%22d395145f-e60e-462c-a4cb-5b7d7f97700a%22%2C%22marketplaceItem%22%3A%7B%22categoryIds%22%3A%5B%5D%2C%22id%22%3A%22Microsoft.Portal%22%2C%22itemDisplayName%22%3A%22NoMarketplace%22%2C%22products%22%3A%5B%5D%2C%22version%22%3A%22%22%2C%22productsWithNoPricing%22%3A%5B%5D%2C%22publisherDisplayName%22%3A%22Microsoft.Portal%22%2C%22deploymentName%22%3A%22NoMarketplace%22%2C%22launchingContext%22%3A%7B%22telemetryId%22%3A%22d395145f-e60e-462c-a4cb-5b7d7f97700a%22%2C%22source%22%3A%5B%5D%2C%22galleryItemId%22%3A%22%22%7D%2C%22deploymentTemplateFileUris%22%3A%7B%7D%2C%22uiMetadata%22%3Anull%7D%7D) Most popular #### Enterprise ## from $5200/mo All the Business plan features **plus** off-chain storage for larger log volumes --- - ![Checkmark](https://f.hubspotusercontent30.net/hubfs/8823337/Checkmark.svg) Single tenant - ![Checkmark](https://f.hubspotusercontent30.net/hubfs/8823337/Checkmark.svg) Sentinel connector - ![Checkmark](https://f.hubspotusercontent30.net/hubfs/8823337/Checkmark.svg) Private blockchain - ![Checkmark](https://f.hubspotusercontent30.net/hubfs/8823337/Checkmark.svg) On-chain storage - ![Checkmark](https://f.hubspotusercontent30.net/hubfs/8823337/Checkmark.svg) Elastic search - ![Checkmark](https://f.hubspotusercontent30.net/hubfs/8823337/Checkmark.svg) Azure Off-chain storage - ![Checkmark](https://f.hubspotusercontent30.net/hubfs/8823337/Checkmark.svg) ADX search [Buy LogLocker Enterprise](https://portal.azure.com/#view/Microsoft_Azure_Marketplace/GalleryItemDetailsBladeNopdl/preview/undefined/id/byzgen1683884710094.loglocker-saas-uk/resourceGroupId//resourceGroupLocation//dontDiscardJourney~/false/_provisioningContext~/%7B%22initialValues%22%3A%7B%22subscriptionIds%22%3A%5B%5D%2C%22resourceGroupNames%22%3A%5B%5D%2C%22locationNames%22%3A%5B%5D%7D%2C%22telemetryId%22%3A%22d395145f-e60e-462c-a4cb-5b7d7f97700a%22%2C%22marketplaceItem%22%3A%7B%22categoryIds%22%3A%5B%5D%2C%22id%22%3A%22Microsoft.Portal%22%2C%22itemDisplayName%22%3A%22NoMarketplace%22%2C%22products%22%3A%5B%5D%2C%22version%22%3A%22%22%2C%22productsWithNoPricing%22%3A%5B%5D%2C%22publisherDisplayName%22%3A%22Microsoft.Portal%22%2C%22deploymentName%22%3A%22NoMarketplace%22%2C%22launchingContext%22%3A%7B%22telemetryId%22%3A%22d395145f-e60e-462c-a4cb-5b7d7f97700a%22%2C%22source%22%3A%5B%5D%2C%22galleryItemId%22%3A%22%22%7D%2C%22deploymentTemplateFileUris%22%3A%7B%7D%2C%22uiMetadata%22%3Anull%7D%7D) #### Premium ## from $8350/mo All the Business and Enterprise features **plus** API integration and 3rd party data sharing --- - ![Checkmark](https://f.hubspotusercontent30.net/hubfs/8823337/Checkmark.svg) Single tenant - ![Checkmark](https://f.hubspotusercontent30.net/hubfs/8823337/Checkmark.svg) Sentinel connector - ![Checkmark](https://f.hubspotusercontent30.net/hubfs/8823337/Checkmark.svg) Private blockchain - ![Checkmark](https://f.hubspotusercontent30.net/hubfs/8823337/Checkmark.svg) On-chain storage - ![Checkmark](https://f.hubspotusercontent30.net/hubfs/8823337/Checkmark.svg) Elastic search - ![Checkmark](https://f.hubspotusercontent30.net/hubfs/8823337/Checkmark.svg) Azure Off-chain storage - ![Checkmark](https://f.hubspotusercontent30.net/hubfs/8823337/Checkmark.svg) ADX search - ![Checkmark](https://f.hubspotusercontent30.net/hubfs/8823337/Checkmark.svg) Public blockchain options - ![Checkmark](https://f.hubspotusercontent30.net/hubfs/8823337/Checkmark.svg) AWS & GCP Off-chain storage options - ![Checkmark](https://f.hubspotusercontent30.net/hubfs/8823337/Checkmark.svg) API Access - ![Checkmark](https://f.hubspotusercontent30.net/hubfs/8823337/Checkmark.svg) 3rd party permissioned data sharing Contact us for plan options What happens when you complete your marketplace purchase? ## LogLocker is easy to deploy - with experts on hand to help Azure users with a Sentinel subscription can easily implement LogLocker. Once you've committed to buying here's what happens next: 1. Book an installation call with our engineering team 2. Or, if you have immediate questions, a call with one of our team ahead of the installation meeting. 3. Full details of prerequisites will be provided ahead of the installation meeting. 4. The LogLocker installation is completed within 5-working days once meetings are confirmed and pre-requisites are in place [Start purchase](https://portal.azure.com/#view/Microsoft_Azure_Marketplace/GalleryItemDetailsBladeNop[…]TemplateFileUris%22%3A%7B%7D%2C%22uiMetadata%22%3Anull%7D%7D) Ask a question ![AdobeStock_455812073](https://log-locker.com/hubfs/Blog%20image%20bank/AdobeStock_455812073.jpeg) The challenges LogLocker solves ## Logs are ever more critical for digital compliance and security - #### Increasing cyber security costs - #### Stream lining security and compliance teams - #### Retention of high value logs for long periods - #### Increasing volumes of telemetry data ### Your business wants ways to do more with less and drive value from existing security investments If you're looking at LogLocker your investment in SIEM (Security Information and Event Management) is likely significant. To truly reap the benefits of SIEM, you need to be sure that your security and compliance teams are getting the most value out of this powerful tool. Imagine a Venn diagram where the circles of security and compliance overlap. The sweet spot in that overlap is where your SIEM should reside. This is where it becomes more than a tool—it transforms into a bridge, uniting these typically isolated areas to unveil insights and boost efficiency. By working together with LogLocker, your security and compliance teams can turn your SIEM into a valuable asset that shields your organisation from cyber threats and regulatory pitfalls Buy now Ask a question ### You need to avoid siloed teams by reusing skills, data and functionality to gain business efficiencies. The disconnect between siloed security and compliance teams creates a critical blind spot. Security, focused on real-time threats, overlooks long-term compliance gaps. Compliance, chained to checklists, misses dynamic security risks. This double vision leaves vulnerabilities unseen and unaddressed, potentially increasing audit time and fines and ultimately weakening your overall defence. Breaking down these silos and forging a shared view through integrated tools and proactive collaboration is key to achieving resilient security and seamless compliance. Buy now [Book a demo](https://meetings.hubspot.com/alex-cawthorne/marketplacediscoverycall) ### Native options are not suitable for long-term log retention being costly, unable to accommodate custom data types and lacking the preservation capabilities required. Preserving data over vast stretches of time is a formidable hurdle. Storage technology constantly evolves, demanding data migration to survive, while physical media degrades, necessitating backups and redundancy measures. Data formats and software compatibility become obsolete, requiring costly conversions to maintain accessibility. Privacy concerns escalate with lengthy retention, demanding meticulous access control and potential anonymisation. The sheer volume of data can become unwieldy, requiring efficient archiving and retrieval strategies. In short, safeguarding information against the relentless march of time is a complex juggling act demanding constant vigilance and resourcefulness. Buy now Ask a question ### You need tools to enable selection and filtering of logs to ensure that only those with value are processed and retained. Retaining unfiltered logs is not a sustainable option given the projected data growth and increased regulatory requirements. The deluge of log data threatens to engulf organizations like a rising tide. Each click, sensor ping, and system event spills into the reservoir, and the torrent shows no signs of slowing. Existing tools strain under the pressure, buckling under the ever-growing weight of analysis and storage demands. Future projections paint an even bleaker picture, with data volumes set to explode exponentially. This tsunami of information threatens to drown our ability to identify critical security events and maintain regulatory compliance. Navigating this data deluge will require innovative solutions, from intelligent filtering and compression techniques to scalable storage architectures and AI-powered analysis tools. Only by riding this wave of data, not succumbing to it, can organizations unlock the valuable insights hidden within. Buy now on Azure marketplace [Book a demo](https://meetings.hubspot.com/alex-cawthorne/marketplacediscoverycall) ## One compliance tool to rule them all  [GET A DEMONSTRATION](https://meetings.hubspot.com/alex-cawthorne/marketplacediscoverycall) [BUY ON AZURE MARKETPLACE](https://portal.azure.com/#view/Microsoft_Azure_Marketplace/GalleryItemDetailsBladeNop[…]TemplateFileUris%22%3A%7B%7D%2C%22uiMetadata%22%3Anull%7D%7D) ![ByzGen Logo](https://log-locker.com/hubfs/ByzGen%20Logo.png) ByzGen Ltd 6th Floor 60 Gracechurch Street London EC3V 0HR ### Resources - Blog - Newsletter ### Company - [ByzGen](https://www.byzgen.com/) © 2023 ByzGen Limited | All rights reserved | [Privacy policy](https://log-locker.com/privacy-policy?hsLang=en) [Powered by Atlas - a B2B SaaS HubSpot theme](https://www.kalungi.com/atlas-hubspot-theme-for-b2b-saas-software)