sorry Brian it's sql server login.

anyway i changed our server audit level to success.seems like i need 2 restart our server.i'll restart our server when there r no logged in users.

thanks for ur time.

cheers