Summary

The Windows 2000 event logging mechanism gives you a good way to monitor system activity, but you have to take the time and effort to monitor it, either with your own eyes or using automated tools like EventCombMT. Because all of the event log data is available through tools like DumpEvt and Perl, you can easily roll your own filtering processes, or you can invest in a management tool like MOM that provides monitoring and filtering for you.