Filebeat vs batch

Hi, before Filebeat consume some logs I have to decrypt them with a batch file, and I was thinking, while decrypting the logs I can use the windows brother of grep "{ $_ -match "expression"}" to filter the logs I need.

So that makes me wonder, which will consume less resources on the server, the Filebeat "include lines", or the powershell "-match"?

what do you think?

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.