https://www.oryszczyn.com/filtering-events-sent-to-azure-sentinel-using-the/
Filtering Events Sent to Microsoft Sentinel Using The Azure Monitor Agent (AMA)