Our WAN consists of 10 geographically dispersed sites. On each site
there are 2 domain controllers. Our sites are connected by means of an
MPLS network.

One of the sites serves as the central hub, where all services are
hosted.

We are using an application called Active Administrator by a company
called Scriptlogic to centrally record the security logs of all domain
controllers on all sites. This application is hosted on a server in
our central hub site. The database backend is hosted on another server
on the same site. There is an Active Administrator service running on
each domain controller. This service uploads details of the security
log on each domain controller to the Active Administrator application
server.

We have noticed however that this service periodically causes
congestion on our MPLS network, as all domain controllers are
uploading security log details to the one location.

My question is, does anyone else here use Active Administrator? If so,
have you run into the problems we are experiencing and were you able
to resolve them?

I have not gone into detail about application versions, events being
logged, etc., as I would first like to find out if anyone has had a
similar experience.

Thanks,
A