Really, have sane log message types and include ”audit” as one of them.

Log levels could be considered an anti-pattern.

I like this. But doesn't it make sense to categorize en Exception thrown as an erro somehow? And a new user registration as an email info?

Perhaps use tags then?