It took us three weeks and two to three people to implement Sentinel.

Our company provides implementation services to customers. 

We have five team members who implement the solution in-house.

We are in the process of making our deployments enterprise-ready to take them to the next level and ensure we have high availability, redundancy, and backups. This is not related to the solution itself, but rather our approach to setup. 

We currently have an installation in Sentinel that is not highly available and we are rearchitecting it to retain data for a set number of years and with the necessary security zoning.

I haven't been in those situations where I had to deploy Sentinel, but I know from experience that deploying the solution will take one to two days.

You have to buy your subscription on Azure since it's a cloud-based solution. After getting your subscription, you will need to make sure that you are also subscribing to Sentinel Service, which is on Azure.

Then, you have to create the log analytics workspace, include that workspace under the subscription, and start integrating the log sources via data connectors. You will see those logs in the Sentinel. It takes 15 to 20 minutes to get your Sentinels, and then you can use those data connectors to integrate the logs.

We are a small company with an in-house technical services team.

We used a consultant from NetIQ to assist with our deployment and it was a good experience.