If you only watch several users, you may create a New View called User Monitor including what you want to watch such as Source IP and Destination IPs, Source and Destination Ports, Event distribution, Events - Not Reviewed etc. When you need to monitor the user's activities, simply open the view and type the user name in Source User Filters.