syslog

Having to start output my logs to a syslog server for compliance reasons, naturally there is a tonne of activity in then. Having read over some guidance from Cisco I've disabled a handful of logs with no logging, i'm curious as to what codes other people chose to omit from logging? e.g...

I've come to the point where I need to begin looking at logging for ISO 27001 compliance. Budgets are tight (aren't they always!) but I'm thinking the easiest way is to use some form of syslog server in our Windows domain based environment and regularly review the most frequent or critical...