If I hit your firewall, and made it through, would that show up as an attack, doesn't seem like it would. In other words, the failures are picked up because they were blocked.  Using your example, if a person is able to slip into my back window, undetected, until the point that they are detected, I would never know that they were ever their unless I deduced it from what was missing.