Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Sam2
Contributor
Jump to solution

Reduce Identity Awareness Logging

We have a fairly large deployment and I am leveraging the IDC to get identities. Daily I am producing more IA logs than I am traffic logs, close to 800K per day.

We do not have enough users to produce 800K logs, and a majority of these logs are the same users being reported as logging in/out across multiple gateways subscribed to the same IDC feeds.

Is there any way I can turn off the login/logout logs and just have the logs enriched by the identities? 

Thanks

Capture.PNG

 

 

0 Kudos
1 Solution

Accepted Solutions
the_rock
Legend
Legend

Hey @Sam2 

Can you check what below is set to?

Andy

Screenshot_1.png

View solution in original post

0 Kudos
4 Replies
the_rock
Legend
Legend

Hey @Sam2 

Can you check what below is set to?

Andy

Screenshot_1.png

0 Kudos
Sam2
Contributor

RDP events are ignored but machine IDs were not. I am setting machine IDs off for my 3 controllers and ill see what the reduction looks like. 

 

Thanks!

0 Kudos
Sam2
Contributor

This worked great, 500k less logs a day! 

 

Thanks!

the_rock
Legend
Legend

Good job @Sam2 👍👍

0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events