We want to keep track of when certain things happen on a device (USB drive plugged in, HDMI connected, etc). How can we monitor events in the system log and archive them for review later? Our review period might fall outside of when they naturally get purged from the system log.