I aggregate and alert, and have considered using those alerts to trigger config management of sorts, out-of-band