The only time I have seen this type of specific reporting is with a company who had crystal reports developer on staff.
To generate the specific event, at least in syslog, I have used the kiwi syslog generator to send specific syslog messages to LEM to test out a filter.
Amit Shah
Loop1 Systems