Agree with you Andy.
Only other thing I have seen from the logs is that there is some E2 activity (not user) to the HDD before system log ends - thats why I was interested in /dev/sda
So @omega99 next time it happens can you pull of the dmesg log?? /var/volatile/log/dmesg