Way back when I used to take Microsoft certification exams there were often questions of the form “Perform task X with the minimum of administrative effort” Most, if nor all, of the possible answers would be correct but the correct answer was the one that achieved the goal with the minimum amount of work.
Many, if not most, administrators don’t seem to follow that model.
This was brought home to me when I saw a forum discussion about collecting event log information from a bunch of remote servers on a regular basis.
You could set up a scheduled task/job that runs a script against the remote servers – collects the log information and populates an Excel spreadsheet
You could enable event log forwarding and just interrogate the combined logs as needed.
The second option is the easier to MAINTAIN and will cost you less effort in the long run.
When you start to solve a problem – stop and search for a bit to see if there is a solution already available in Windows server. Bet you’ll be surprised by what you find