You can enhance security event reporting in Sentinel by enabling process accounting. However, enabling process accounting substantially increases the activity on the monitored computer and also changes the base computer configuration, which might not be acceptable for your environment. Enabling process accounting is optional. Do not enable these modules if syslog reports the events you want to monitor.
For more information, see the respective Collector documentation on Plugins documentation page.