Hello all.
I was following the instructions at https://docs.graylog.org/en/3.1/pages/secure/sec_log_user_activity.html in order to log access to my Graylog servers. The problem that I have is that this generates a significant amount of excess data, specifically checkins from all of my sidecars to poll / pull their configurations periodically.
is there any way to NOT log specific events in this fashion, like the calls from sidecars, so that I can more easily only monitor standard login activity to the application itself?