Recommend a mechanism for monitoring security alerts on a server. What types of events need to be monitored and how often do the security logs need to be reviewed by a human being as opposed to an automated process? Explain your answer.