Abstract: The dynamically generation and evaluation of User Activity Records (UARs) is presented herein to determine which UARs to forward for analytics processing, and how much information to include with the forwarded UARs. To that end, UARs are identified as normal, e.g., those UARs satisfy an evaluation condition, e.g., a threshold condition, and or as abnormal, e.g., those UARs that do not satisfy an evaluation condition, e.g., the threshold condition. For those UARS identified as normal, only a small subset of the normal UARs are forwarded for further analysis to reduce the data volume associated with these normal UARs. For those UARs identified as abnormal, enrichment data is appended to the generated UAR to generate a detailed UAR, all which is forwarded for further analysis.