The "Controller Audit" report type is best suited for this purpose. You can choose default time ranges up to the past year or set a custom time range for the report. This report will contain all "LOGIN" and "LOGOUT" events by Username and Date/Time (as well as all other controller activity, unless filtered out).
Found something helpful? Click the Accept as Solution button to help others find answers faster.