I'm trying to find something that I can use to fire metrics and alerts at Metricly when we see things like root elevations and ssh logins and stuff