a little ludwig goes a long way: Audit Blog?. Another great idea by ludwig. A blog makes much more sense than the system event log. Error should really be free form text rather than forcing things into fields that don't mean much. Just look at the audit log of XP sometimes as an example. Then you could search and sort with free text tools easily rather than having to use a clunky binary reader like the event log of Windows.