Currently it's not possible to get an alert on the auditlog event like removal of some hosts or users, etc. Would be nice to have a way to be notified about changes by specific condition - remove, add, etc.

Also this will allow to make custom integration to forward specific events (login/logout) into third party systems like Splunk, etc... through webhooks/custom scripts.