Monitoring Microsoft SQL Server login audit events in Graylog