All Events of User logon / logoff are categorized by their type, namely, errors, warnings and information messages. Due to implementation and behavior, there are no Event IDs currently associated with User logon / logoff Trigger.
Automation Workshop includes User logon / logoff trigger that executes Task when a specified user either logs into or out of Windows. Processing one type of operation (either log in or log off) per trigger supported. Trigger can monitor the system for logins or logoffs of a particular user, one of multiple users or any user.
If you have any questions, please do not hesitate to contact our support team.