Reduce Identity Awareness Logging

[Sam2]

We have a fairly large deployment and I am leveraging the IDC to get identities. Daily I am producing more IA logs than I am traffic logs, close to 800K per day.

We do not have enough users to produce 800K logs, and a majority of these logs are the same users being reported as logging in/out across multiple gateways subscribed to the same IDC feeds.

Is there any way I can turn off the login/logout logs and just have the logs enriched by the identities? 

Thanks

[the_rock · Accepted solution]

Hey @Sam2 

Can you check what below is set to?

Andy

 

[Sam2]

RDP events are ignored but machine IDs were not. I am setting machine IDs off for my 3 controllers and ill see what the reduction looks like. 

Thanks!

[Sam2]

This worked great, 500k less logs a day! 

Thanks!

[the_rock]

Good job @Sam2 👍👍