How does the filter works in the consolidation process? (9381)

When you run the Consolidation Job and then setup Filtering - where does it occur? On the source or on destination machine?

During the Consolidation process the data that is sent over the network is always compressed. If you setup filtering, InTrust for Events will copy the file from the repository to the local computer (Intrust for Events console machine), decompress it, filter out unnecessary data, compress the remainder, and copy the compressed data to the destination repository.