Hi
Live authentication data will appear in the passed and failed authentication logs. In ACS these can be logged locally and/or remotely.
If you have an appliance you're probably stuck with syslog, however if you have s/w ACS ODBC logging could inject the data directly in your applications database.