Just what I needed

We were broke into and found that user login activity is not logged anywhere. If I had this before the breakin it would have allowed me to fine the login that the user used to breakin.

Good work.