i would like to extract (as a text file)from the Security Event Log just logon failures: Event 529 and Event 680. When I export the logs to text, I get the whole log, even when I am looking at a filtered view. Does anyone know how to export just these events, or know of any free tools that can pull these out for me? I need to use these excerpts to send to abuse coordinators at various ISPs, because they require raw logs in text format when a complaint is submitted. Thanks in advance.