This group tracks successful logins to SQL Server. To track failed logon attempts see FAILED_LOGIN_GROUP.
LOGbinder for SQL Server events generated under this Audit Action Group: