Monitor all event logs centrally?
I've got an issue here which I'm sure many of you also come across regularly - people get error messages on their screens and then simply report the computer as being 'broken'. When quizzed about what the message said, the response ranges from 'Computer something something' to 'I dunno, I didn't look'.
So, in an effort to reduce this issue, I've been thinking about central event logging.
Now I realise that this is going to be a lot of logging when you consider 250 computers all reporting back to one place, but at the same time, it will save a lot of time and effort, and I have the spare capacity to handle it.
My question is this - do any of you do this already? If so, what do you use to do it?