One of the longstanding feature requests for Orion NPM has been user activity tracking similar to what NCM offers. Is it possible to configure a filter in LEM to collect events from the NetPerfMon event log on a Solarwinds polling server and then create an email notification based on the alert?
That's coming really soon. Check out this blog post from the LEM product manager:
In particular, see the "Upcoming Releases" section about half-way down. If you're interested in testing out any of the new features as they come available, there's a survey link in that section that will get you on the list.