What's the best way to track real-time updated list view?

[sfresher]

For example, for the Windows Event Log. Let's say it's real-time updated (even though it's not), and I want to record all the error events. How should I do this since the index is dynamically updated?

[BugFix]

For example, for the Windows Event Log. Let's say it's real-time updated (even though it's not), and I want to record all the error events. How should I do this since the index is dynamically updated?

Write all error events in an array. Read out error events periodic and compare the count of errors with ubound of error-array.

i.e. is ubound = 5 and count total = 8 then you must add the three error events with lowest index into the array.