Does anyone here export their logs to a non-Microsoft service for long-term retention? If so, how are you doing it? Is that approach practical, or is it better to stick with Azure Blob storage?

We’re a non-profit org trying to actually do the right thing and get Sentinel going — tie in Defender, Entra, logs, all that.

But between licensing weirdness, CSP confusion, and support just looping us around, it feels like they make it way harder than it should be.

We want to use it. It’s just like… Microsoft doesn’t want us to?

Anyone been through this and found a clean way forward?