diff --git a/src/ServiceControl.Infrastructure/LoggingConfigurator.cs b/src/ServiceControl.Infrastructure/LoggingConfigurator.cs
index 6c0b090dea..5e232163a0 100644
--- a/src/ServiceControl.Infrastructure/LoggingConfigurator.cs
+++ b/src/ServiceControl.Infrastructure/LoggingConfigurator.cs
@@ -77,6 +77,12 @@ public static LoggingConfiguration BuildConfiguration(string logFileName, string
                 FinalMinLevel = LogLevel.Warn
             };
 
+            var efCoreRule = new LoggingRule()
+            {
+                LoggerNamePattern = "Microsoft.EntityFrameworkCore.*",
+                FinalMinLevel = LogLevel.Warn
+            };
+
             // The authorization audit trail is emitted on a dedicated category, separate from the plain-text
             // operational log, so it can be shipped to a SIEM without the two streams polluting each other.
             // Each event is already a complete ECS JSON document (built in AuthorizationAuditLog); the target
@@ -121,6 +127,7 @@ public static LoggingConfiguration BuildConfiguration(string logFileName, string
 
             nlogConfig.LoggingRules.Add(aspNetCoreRule);
             nlogConfig.LoggingRules.Add(httpClientRule);
+            nlogConfig.LoggingRules.Add(efCoreRule);
             nlogConfig.LoggingRules.Add(auditRule);
 
             nlogConfig.LoggingRules.Add(new LoggingRule("*", logLevel, consoleTarget));