Windows Security Events logs can be extremely high volume, especially on domain controllers and file servers, or in environments with active service accounts (that is, system accounts that are constantly logging into other systems). If the Logon Tracker query performance becomes slow or even times out, it may be necessary to check the size of the database and to reduce the number of events in the module’s database.
The Advanced Configuration and Monitoring page is provided to review server module status such as database size, message ingestion rates, scheduled job health, and message bus connectivity.
To open the Advanced Configuration page: