Small isolated tests are a good way to understand log files. Start Wowza and connnect with a Flash player, play something, seek and pause if it is vod, stop, disconnect. Now look at the logs starting with x-event "app-start". Do the same for HTTP or RTSP streaming session.
Sounds right, except "distory" should be "destroy". If you are following my suggestion you can discover these sequences easily. What you see is what you get in the logs. Just make sure your tests are isolated, discrete tests so that you are sure what sequence/client type you are looking at.