anyone got good info about reading the event log?

I want to read the event log, including the username and description. I figured out how to get through the log itself but it seems the username is tied to a sid, then you got to go get the username info from that.

Also the description is some formatted message. Anyone got code to get the info I seek? I've been running round and round all day with this one.

It's specifically the username and description for a particular event that I am having trouble with.

The ReadLog returns a SiD (security id), then it's up to you go to find that security id's username with the LookupAccountSid or something like that.

Also the event description is not easily read and needs to be created via FOrmatMessage API or something.

Was hoping someone might have done this already.