Event Log Consolidation

[secman]

We are planning to move away from WinSuite and have a well advanced GPO based setup ready for testing. However, one of the things we will loose with Winsuite going is the ability to easily see who logged on where and when. We know that this information is looged to the security event logs on the DCs but as we have 4 DCs (W2K3 R2) we are looking for a way to consolidate the event logs instead of having to track through 4 server logs to prove that "little jonny was the idiot logged onto the PC that has had all it's keys swapped on the keyboard!!"

 

Any ideas or software suggestions? We are not skilled with VB or programming here so something free would be best.

 

Thanks:)