The server team is concerned about the high volume of logs forwarded to their syslog server, it is determined that DNS is generating the most logs per second. The risk and compliance team requests…

The specific log filtering definitions for log types (like Traffic logs) are configured in Device > Log Settings, not directly in Objects > Log Forwarding which defines profiles.

Log filtering for specific log types, such as Traffic logs, is configured within Device > Log Settings. Applying the filter `(port dst neq 53)` to Traffic logs will exclude all traffic logs where the destination port is 53, thereby significantly reducing the high volume of legitimate DNS traffic logs as requested.

While `(app neq dns-base)` would logically achieve the goal of excluding legitimate DNS logs and forwarding port abuse, the correct answer explicitly uses `(port dst neq 53)` as the filter criterion.

The specific log filtering definitions for log types are configured in Device > Log Settings, not directly in Objects > Log Forwarding.