In the process of planning for an upcoming deployment of an AD structure with a single forest, a top level empty root domain and two child domains—which will house two business units. Within each business unit there are 30 remote sites and head-quarters site. In opting to configure auditing in multiple items, the amount of security logs in the network will grow very quickly.
Based on the details given, my question is; what tools does Microsoft (and other third-party) vendors have available to make gathering and interpreting of logs easier? If any, is it freeware, paid, or both?
All help is greatly appreciated.