how to get detail information out of dc event log

[bookouri]

We have auditing turned on for our domain. Every time a user logs on to the domain an event is recorded in the security event log. I can export the event logs to csv files but the detail information that tells what user the logon event is related to is not exported.

I need to produce a list of all the logon events for one username for a particular time period. Can anybody point me to anything that explains how to do something like this?

I just need to get the logon events with the user details into a csv file and it seems to be a lot more difficult than i thought it would be.

any help would be appreciated..

 

[kmcferrin]

Microsoft has a Log Parser tool that does this:

http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=24659

________________________________________
CompTIA A+, Network+, Server+, Security+
MCTS:Windows 7
MCSE:Security 2003
MCITP:Server Administrator
MCITP:Enterprise Administrator
MCITP:Virtualization Administrator 2008 R2
Certified Quest vWorkspace Administrator