Reporting from Event Viewer Description field (Applic. Log)

[amurgett]

I need to report from the 'NT Current Event Log' using Crystal. The report needs to provide the names of users unsuccessfully trying to log onto various SQL Server databases. However, information regarding failed logon attempts are stored in the description field (in the Application log) for the event but when looking at this in Crystal, it is a memo field therefore I am not able to do any string manipulation to grap the information I need.

Can anyone tell me a way round this please / any different approach I can make to getting the information I require ?

Thanks.