event viewer problem, win 2000 server

[DocterNick]

Hi everybody!

I create important databases from the system log files. I've just swaped from nt4 to win 2000 server.

Now I have a big problem.

If one of my users has disconnected by user request, the number of bytes sent and recieved appears as zero on the log file.

The logs still show the bytes if the user was disconnected by admin's request. I desperatly need theese sent/recieved bytes.

Where do I go from here?