Well not sure if it would help or if it pertains to your situation but you could setup a TACACS server, this would provide logging.. hopefully this is what your looking for. some of the places I've worked at before used TACACS for logging and authentication.