Any advice for filtering out unnecessary events from windows security logs?

I work in a SOC; sec logs are getting pretty large for one of our clients.

I was going to start with analysing what is causing large amounts of noise on each device and work things out from there, but wanted to know if there are any guides for straight exclusions from sec logs that I could start with? Or if anyone has any general advice for filtering sec logs? TIA!

advice cybersecurity events logs security windows windows security