Implemented

Windows Events Prefilter on the Agent

Windows Filtering Platform generates a lot of data which very helpfully you have an article that allows me to filter it out as it enters the LEM

SolarWinds Knowledge Base :: Disabling Windows Filtering Platform Alerts Using Alert Distribution Policy

However it still means the data travels over the network and this means I cant collect data from our remote offices, it would be better if the windows agent filtered this at source