What's the bandwidth utilisation of compressed logs sent from your domain controller to LEM?
LEM Agent traffic is comparable to AD authentication traffic.