# Log tuning

**URL:** <https://discuss.elastic.co/t/log-tuning/356844>\
**Category:** Elasticsearch\
**Tags:** elastic-stack-monitoring\
**Created:** [April 5, 2024, 8:00am UTC](https://discuss.elastic.co/t/log-tuning/356844 "2024-04-05T08:00:38Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![Ganesh\_DV](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ganesh_dv/32/130235_2.png) [@Ganesh\_DV](https://discuss.elastic.co/u/Ganesh_DV)\
**Post date:** [April 5, 2024, 8:00am UTC](https://discuss.elastic.co/t/log-tuning/356844/1 "2024-04-05T08:00:38Z")

</div>

Hi team,

Im ingesting logs from Active directory (AD) server to elastic SIEM but daily im getting 2cr logs from 1 single server. such servers we have 4.  
so kindly help me , how to reduce such huge log source without compromising security .

Thank you