Investigate if we can trim what we're sending to Loki

There should be queries to help us see what namespaces or units are consuming the most logs, may be some opportunity to trim down here and save money.