Access Log- Enhance to include access-denied events

Currently, the Access Log contains actions a user was able to perform. I am asking that this log includes actions that a user attemped, but denied. This would allow us to assess our user access needs. Additionally, it can be helpful that the events in this log can be used to trigger alerts, and be used to create user-access reports. Thanks.