Log username for failed logins

[defensivedepth]

I am not clear how to log the username/email for a login attempt? I have the following flows defined.

For audit purposes, I need to track failed logins.

      flows:
        settings:
          privileged_session_max_age: 5m
          ui_url: https://URL_BASE/?r=/settings
          required_aal: highest_available
        verification:
          ui_url: https://URL_BASE/
        login:
          ui_url: https://URL_BASE/login/
        error:
          ui_url: https://URL_BASE/login/
        registration:
          ui_url: https://URL_BASE/login/
          after:
            oidc:
              hooks:
                - hook: session