grep.1posix -B 1 'del ' powershell.evtx.log
search a file for a pattern
source manpages: grep