I’m having a problem with my slack client today and “at replies” — but using the user_events tables, you can get some types of login information depending on how your system is configured.