Implement periodical detection and reporting of anomalies to system admins
The anomaly report could contain things like these:
- List of most common inspection errors in last day
- Examples of unclassified events or events without assigned severity
- List of detectors that are silent more than is usual
- List of accounts that are pending activation
etc.
Try to think about other useful information that might come in handy to system administrators.