This will cycle and look to see who is using SA, and what applicaiton they are using to connect with it....

/*

Security audit in SQL server captures only successful and failed...