event 4624 log succesful login on SIEM

[febelus]

hi,

i've to log all succesful login from DC auditing into siem. i search for event 4624, but i see that on any login i have al lot of 4624 event from same dc at same time or in 5 second.. how can i have only one log for 1 succesful login