Hi Ben,

Try looking under Admin Console->Audit Log->User Events. The folder-level auditing doesn't track logins/logouts, but it's available from the root container ("/") to Site Admins.

Thanks,
Josh