You might be able to manage it by adding a listener for the Auth\Logout event, but whether or not you'll be able to differentiate between a session expiration or a manual logout that way is a question.
Your best bet might be to implement a custom session driver that extends whatever session driver you would otherwise use, then override the gc and possibly destroy methods to insert your log entry in the DB.