There is a need to complete the monitoring with a system that monitors and analyses activities and events in the infrastructure. Such a system must fulfil the requirements for both architecture, data collection, analysis, presentation and reporting.
It is important that the system does not require a lot of work for the set-up, configuration and follow up in the operational phase. This means that the system must be able to analyse and automatically find deviations. The system must be able to uncover and report events that have not occurred before, i.e. unknown types of error situations. It is important that the system can grade these deviations in accordance with criticality.