login auditing can be done easily using below option.

Failed logins

Successful logins

Both failed and successful logins

which write to error log .

but if you select successful logins and Both failed and successful logins

it will create events in huge manner in errorlog,which might affect your performance of server

Hence select only failed login.