Turn off logging for icmp

I am collecting traffic logs from OT environment which has lot of icmp traffic. This icmp traffic is mostly heartbeat events to check health of all components.

I am contemplating if I should drop icmp traffic from logging but I understand that I will loose any capability of detecting if attacker deploys payload which leverages icmp.

My question is to know your opinion on downside of dropping icmp traffic to save cost. What attacks ? Or in general any advise …

attacker check collecting components cybersecurity environment events health icmp logging logs lot ot environment payload traffic turn understand