Hi, before Filebeat consume some logs I have to decrypt them with a batch file, and I was thinking, while decrypting the logs I can use the windows brother of grep "{ $_ -match "expression"}" to filter the logs I need.
So that makes me wonder, which will consume less resources on the server, the Filebeat "include lines", or the powershell "-match"?
what do you think?