Leave no data behind: Using summary rules to store data cost effectively in Microsoft Sentinel

https://techcommunity.microsoft.com/blog/microsoftsentinelblog/leave-no-data-behind-using-summary-rules-to-store-data-cost-effectively-in-micro/4296785