CREATE SERVER AUDIT [AuditLogin]
TO FILE
(   FILEPATH = N'D:audit'
    ,MAXSIZE = 5 GB
    ,MAX_ROLLOVER_FILES = 2147483647
    ,RESERVE_DISK_SPACE = OFF
)
WITH
(   QUEUE_DELAY = 1000
    ,ON_FAILURE = CONTINUE
)

CREATE SERVER AUDIT SPECIFICATION [EveryLogin]
FOR SERVER AUDIT [AuditLogin]
ADD (FAILED_LOGIN_GROUP),
ADD (SUCCESSFUL_LOGIN_GROUP),
ADD (LOGOUT_GROUP)