***Scenario***

I've been tasked to evaluate audit trail (Microsoft/Solaris/RedHat servers) monitoring tools that will allow sys admins to review events in real-to-near-real time. The servers being monitored should have the ability to send the events to a centralized server. Open source and commercial recommendations would be greatly appreciated.