Too Many Event ID 4648, 4624 (logon), 4634 (logoff), 4672 (special logon) Every Second

Hi,

We have 2 units of Exchange 2013 servers generating a lot of logon (Event ID: 4648, 4624), logoff (4634) and special logon (4672) by HealthMailbox in Security Log every second. It generates 1GB of Security Log daily.

I have done a lot of research online and know that it is "normal", many people see this in their Security Log. However, it is not feasible to save 365GB of Security Log in a year.

How can I disable this log or do you have better suggestion?