We do it with a 3rd party tool.. not sure if it's available natively.

You might want to look at Snare, which is availabe in open-source and commercial versions. I've been playing with Snare a bit and like the fact that it does what I want on a small scale and can grow to a commercial back end without changing any of the clients.

The Snare client can send event log messages to a Syslog or Snare server in real time. The clients are all free. I use CygWin for my Syslog, although I use Kiwi's commercial product for larger environments.

Glenn
_________________________
Actually I am a Rocket Scientist! \:D