I'm setting up and testing Compliance Manager for the first time and trying to understand what it reports on for the default configuration. From looking at the settings I would think creating a new SQL Server login would result in a event being reported but that is not what I'm seeing. I have "Security" checked at the server level, and I've tried adding Server Administrators to the Privileged User Auditing, but still no luck getting a new login to show up in Compliance Manager.
We recently discovered an issue where if you have both the login check for Server Auditing and in Privileged Users, the login event is not captured. If you uncheck the login for Privileged Users and leave the one checked for Server Auditing, it will work for all users, including the Privileged users. This will be corrected in the next release of SQL CM.