A chief security officer $($CSO$)$ is overseeing the deployment of a Security Information and Event Management $($SIEM$)$ system in a large organization with a mix of computer systems and network appliances. The CSO has concerns about the system resources that the data collection process on the individual computer systems utilizes. Which method should the CSO consider to minimize the resource usage on these systems while ensuring effective data collection for the SIEM system?