How to differentiate Success and Failure Audit logs in Security Events (for events like 4723)?

The builtin connector for Windows 'SecurityEvent' is not logging the property 'Keyword' which is generally used to classify the Security Events to Success and Failure Audit.   We have a requirement...