Need some possibility to wtite information about all or some events to the logfile: for example, to use this logfile with some spohisticated event-correlation engine like SEC.
I suggest to add new "Media type': "Log"
This "Media type" must accept 1 parameter: log file path.
All records in the log will be simple CSV-formated text conforming to common CSV rules (repeated double-quotes and so)
Unlike all other media types it must write common information about event anyway and content of "message" (with all "\n" replaced by simple space) - in the last field.
"Common" fileds is a copy of the fields in the "events" table with addition of the expanded (with macroses replaced by its values) version of the "trigger.description" attribute if we have deal with the trigger-based event (here will be empty string if it is not trigger-fired event).