How to Drop Logs Before They Are Ingested into Aria Operations for Logs 8.18 server

[Eseerh]

I have spun up an Aria Operations for Logs 8.18 on-prem server but unfortunately have not found a way to drop logs before they are ingested. My Aria for Logs server is hosted on a VM, and I noticed that the vmdk is filling up very quickly for the number of agents I have connected to the log server. The filtering rules are cool, but they seem to be done post-ingestion, so I am curious if anyone knows a way to drop logs that I might deem unnecessary to collect to ultimately save my vmdk from inflating too rapidly.

Also, the internal storage like /storage/var and /storage/core are not filling up at incredible rates, it's just the vmdk that is filling up.

Thanks for reading, any help would be greatly appreciated! Cheers!

[Simon Rowan]

In the cloud service you used to be able to filter at the cloud proxy but I dont believe there is a way of doing this in the on-prem version. This becomes annoying when facing network egress charges from Azure VMware Solution plus the amount of network traffic and load it created ont he Logs instance