Curious about everyone's approach to log analytics. For instance: Do you exclude events with

counter: 0

(initial scheduled runs), and if so, at which stage do you exclude it (ingest/index/query)?