Again, I would like to say thank you all for being so resourceful. I used the dumpel.exe suggested by byrce and extracted the event id 6005 and 6009 count. The count was exact on both event id's. I was overwhelmed like archimedes, Eureka! This is the reason I can never do anything else except IT. It's adventurous...especially with Kix gurus like you,I am over the moon with resource. Thanks to you all !!
-DoUntil "keep doing until you get it" 
[ 30 July 2001: Message edited by: Ntjazzed ]
