Seeing things from the end user's perspective can help integrators see how they can best involve themselves in the process of security monitoring.