A method for monitoring events generated on at least one computer system, said method comprising the steps of:(a) monitoring a set of event data generated on said at least one system;(b) recording said set of event data in a database;(c) interrogating said database to thereby select alert event data from said set of event data according to a predefined set of rules; and(d) reading said alert event data and issuing an appropriate action due to said generated event, said action issued according to said predefined set of rules.