Halo can deliver a wealth of information about security issues on your server, from firewall changes, access changes, software vulnerabilities, and file integrity monitoring alerts. However, the next step to integrating that information into your workflow is to deliver those events into an aggregation tool like Splunk to help you monitor and analyze your environment. We've developed an integration script for just this purpose.
Learn more here: http://blog.cloudpassage.com/2013/02/21/splunk-halo-events/
Skip straight to the Halo Event Connector tool here: https://github.com/cloudpassage/halo-event-connector-python