This could include any changes to nodes, logins to the product, ACL settings, monitoring settings, or node health status. The product administrator also typically consumes information that the organization at large may not care about. One of the most, if not the most, important person using a product is the administrator(s). We are going to focus on FIM/ SCM information today to help eliminate the noise and focus in on delivering actionable data to the appropriate audience(s). These stored pieces of data can change from useful information to an exhaustive record of every activity, something which can easily overwhelm your IT staff.
The Tripwire Product Suite is capable of collecting a treasure trove of information.
