1. A method of capturing real-time log data of an application executing in a computer comprising the steps of: retaining a first real-time log data of the executing application in a temporary memory; archiving the first real-time log data at a first information level; the first real-time data comprising a first event; in response to the first event, changing the first information level to a second information level; increasing a time history of and archiving a second real-time log data at the second information level in addition to archiving the first real-time log data.