Monitoring event logs from workstations provides two important benefits a) Save money by adopting a proactive approach to supporting end users (enhanced productivity), and b) Enhance overall security of your organization. The sheer volume of data that must be analyzed, however, renders manual monitoring completely impractical. On the other hand, if you don't monitor workstations at all, you are exposed to security risks, higher cost of administration, lost productivity and user frustration. Rather than adopt an all or nothing position, these documents suggest a middle ground with automation to help justify the cost/benefit.