Kent,
Nothing to be sorry about. I think I know what you want; to query AD for the WS name the user logged on from/to. Don't think it's in there, or if it is don't know where.

The other suggestions are based on your comment RE: parsing a flat log file.

Sorry we're no closer to your goal, but at least there's some good ideas floating around and at least this thread gets bumped back to the top.

_________________________
Give a man a fish and he will be back for more. Slap him with a fish and he will go away forever.