active change monitor, compiles activity from multiple apps, alerts sysadmin and /or devs