>>In my test I never actually received a null value for Keywords. Have you looked at the actual event in the eventlog for that item - be interested to know what is there ?
>>What log are you looking at ?
>
>This is on all logs, all events.

So if you inspect the log using the EventViewer what is the Keywords property for an event which comes up with null in code ?
Did you try running the equivalent of my code ?