High traffic rulesets to use and wazuh configuration

4

What default set are you talking about? The ones we ship with /rules or the ETOpen ruleset?
What rules trigger mostly that annoy you?