Under Organization > Monitor > Login attempts you can configure to send It for a syslog server:

I am not a Cisco Meraki employee. My suggestions are based on documentation of Meraki best practices and day-to-day experience.
Please, if this post was useful, leave your kudos and mark it as solved.