My general responsibilities are monitoring the network, capacity planning, systems analysis, and any other fancy terms you can think of. We have about 500 hosts, mostly HP but also Suns and a lot of other misc equipment related to telephones. I backup the Security Administrator and also have a personal interest in security software in general. Hence intrusion detection is of interest.
People have neither the time nor want to have to look through logs or perform any other manual task.
Just my 2 cents. Smile, it's Adar.