SIMP logs successful and unsuccessful logins. Logins from unknown users are also logged. These settings are found in the /etc/login.defs file and are activated by default.
/etc/login.defs
References: AU-2