You could leverage the WAPI fileop operator and csv_export object, then schedule that script to run on a weekly basis.

We have certain hosts that are setup to capture logs, they continuously perform dns lookups for every entry ... this is very noisy ... is there a way where I ignore / drop / dont log queries from certain clients ? Thanks in advance !