Quest ChangeAuditor is an awesome product. You can't get that level of AD auditing anywhere else, and the UI makes it ridiculously easy to search and find audit info after the fact. You definitely don't need any event logging tools for this, but yes you could also use Splunk to collect ChangeAuditor's events too. Although for AD auditing, the ChangeAuditor UI is what you'd want to use. ... View more