My guess is to create an exclusion drive and then modify the event log paths in the registry, but I'm curious if a better method exists.