Monitor Login failure / success in Active Directory domains?

Hello. We've used zenoss for many years, but have not had a pretty approach to getting Zenoss notifications of login failures from our Active Directory domain controllers. I used a fairly complicated set of rules in Zenoss to process events from the numerous domain controllers and workgroup servers, but they are hard to maintain over time.

Is there some nicer way to do this or possibly a zenpack that helps with this It would also be nice if zenoss could include login success messages from the Active Directory as well.

Thanks