Hi. We use Logfiller and the Logfiller Splunk app for this.
Not only does it show log on / log off time, but it calculates actual usage of a system - not just how long Users are logged on for, but actual usage of the keyboard and mouse...
... View more