Any network security authority worth their salt would tell this manager (and those like him) that "checking up on things" is a hopeless and useless endeavor. Li

Any network security authority worth their salt would tell this manager (and those like him) that "checking up on things" is a hopeless and useless endeavor. Like all log monitoring systems, only actionable items should be presented to end-users. Set thresholds on monitoring systems where the monitors trigger alarms when thresholds are outside of normal operating parameters. It's monitoring 101.