A method for monitoring events generated on at least one computer system, said method comprising the steps of: (a) monitoring a set of event data generated on said at least one system; (b) recording said set of event data in a database; (c) interrogating said database to thereby select alert event data from said set of event data according to a predefined set of rules; and (d) reading said alert event data and issuing an appropriate action due to said generated event, said action issued according to said predefined set of rules.