Too much alerts

Looks like all spider behaviors and port scans will be captured by my cowrie/glastopf honeypots, and MHN reports all of them on the dashboard.

I hope the MHN only records invasive behaviors like file uploading, SQL injection, etc. What should I do? I'm flooded by fake alerts.