log file movement start/end time in event log