Explanation/Reference:
Explanation:
Writing to the Windows Security log requires the SQL Server service account to be added to the Generate security audits policy. By default, the Local System, Local Service, and Network Service are part of this policy. This setting can be configured by using the security policy snap-in (secpol.msc). Additionally, the Audit object access security policy must be enabled for both Success and Failure.
References: https://docs.microsoft.com/en-us/sql/relational-databases/security/auditing/sql-server-audit- database-engine