1. A method for improving a network by employing a modular event pipeline on servers within the network, comprising: detecting, by a given server, an event originating on the given server; determining whether the event is relevant to an event processor running within the modular event pipeline; in response to determining that the event is relevant to the event processor, providing the event to the event processor; determining, at the event processor, whether the event matches an existing event object based on identifying information included in the event; in response to determining that the identifying information matches the existing event object, updating the existing event object based on the event; determining whether the existing event object satisfies an audit criterion; in response to determining that the existing event object satisfies the audition criterion, generating an audit event.