I would love to see LEM have the ability to capture any and all change events that occur within Orion. Having real-time correlation data as well as historical views of this data would be incredibly useful.
A few example use cases...
- Look back to see when somebody unmanaged a node and who it was
- Look back to see when somebody changed a custom property on a node and who it was
- Look at a specific time frame to see all nodes that rebooted in that time
- Look at a specific time to see all nodes that went down and correlate that with any network changes made during the same time
- Look back and see specific alerts that were tripped on a node and correlate that with log data from that node to see who was logged on at the time and what they were doing
These are just a few examples and I realize that some of this is possible now in Orion; however, I think LEM is much better designed for this type of work and being able to aggregate and correlate the Orion data with data from the systems that Orion monitors would provide huge benefits.