Having the ability to filter out low level events (Levels 4-7) at the agent level before sending to Log Analyzer and not count against the 1,000 messages per second at the Orion Platform level.
Increased EPS threshold for LA...
Distributed rules would be a plus! Pre-tagging messages, or filtering as you suggested would decrease workload on the LA server!
