Hi All,
I have a problem when receiving logs from the mssql log source because it's too many logs received from Server Audit Specifications and Database Audit Specifications. Fyi, there is no filter applied in this log source. Need someone here to help me on how to reduce the number of logs received for both log sources. I hope someone experienced in MS Audit Log can teach me the best practice of what I need to filter for Server Audit Specifications and Database Audit Specifications in MS SQL Server as long as I can meet the compliance requirements.
This log source has hit my license threshold.
Thank you in advance.
Regards.
Kamarul.
