I need to collect some particular event log entries (for auditing purposes) for one of our Apps, but when an issue occurs the same event occurs hundreds of times, and our SCOM DB is starting to get pretty large.  The app team only care about the first event logged when the storm occurs – is there a way to supress collection of the entries for say 5 minutes?

LB92 selected answer