Is it a Windows environment? Unix? Linux? If it's Windows, just make sure you have plenty of disk space and use the event log, just configure it to log on success/failure.
CISSP,ISC2 Affiliate & Instructor, MCT, MCSE2K/2K3, MCSA, CEH, Security+, Network+, CTT+, A+