I have had more then a few of my (mostly HED) customers ask whether or not it is possible to limit the type of security events that land into the ACS DB. For anyone has ever used any kind of system whether homegrown or otherwise to collect security events from a very busy domain controller with auditing...