Events collection

I think we should elevate severity to its own column; we'll definitely want to filter on it fairly soon. Severity values should be restricted to the usual ones .. 'error, warning, info' although it looks we only use error and info right now.