What's a best practice for ignoring Windows 2008 security events

[gpullis]

Like most of us with Windows servers, I'm fighting with keeping my license usage down in the face of Windows Server 2008 Security event logs.

I'm pretty sure the correct answer is, "every environment is different", but I'm wondering if any of you wanted to share your advice on what events you feel are sufficiently silly that they can be shoved into the nullQueue?

[gpullis · Accepted solution]

Not surprisingly, this one had been answered before, and I just didn't find it before asking. The answer is here: What Windows Event Codes are generally acceptable to filter out