Windows Filtering Platform generates a lot of data which very helpfully you have an article that allows me to filter it out as it enters the LEM
SolarWinds Knowledge Base :: Disabling Windows Filtering Platform Alerts Using Alert Distribution Policy
However it still means the data travels over the network and this means I cant collect data from our remote offices, it would be better if the windows agent filtered this at source