I have recently purchased LA 2019.4 version and installed to the same SQL database where Orion server running.
I noticed that Windows send bulk of syslog and would like to know how that can be fine tune for better output and some guidelines LA
This article explains how you can change the default query that gathers Windows logs for Log Analyzer:
Not sure what you mean by fine-tune but you are able to create tags in LA to be able to quickly to get to a specific event that was generated by the AD or DC not sure if that's what you meant.
SolarWinds solutions are rooted in our deep connection to our user base in the THWACK® online community. More than 150,000 members are here to solve problems, share technology and best practices, and directly contribute to our product development process. Learn more today by joining now.