Audit Termserv login only

At the moment I am only interested in auditing success/failure of termservlogons. Is there a way to do this without auditing every single domain logon as well?? Even more specifically I’m interested in those who logon over the internet.

thanks