Is 94% of your syslog just noise? Now you can filter it out before ingestion.

Multi-stage transformations for Azure Monitor Data Collection Rules are now in public preview, enabling filtering and aggregating logs at collection time to dramatically reduce ingestion volume and costs. The feature processes up to approximately 200,000 syslog messages per second with linear scaling.