VCL eventlog - track create/delete