Level 122
Its not practical to have a logout time.
You can have a "last seen" time? Start a record when the login and then introduce middleware that updates the same 'end' timestamp each time they access the system.
When they stop accessing the system, the last access time will remain.
You can action on Logout, but how many users actually logout, versus just go away?