User audit logging is under Configure > All Settings > Customize > General Settings. It is disabled by default.

This feature enables the investigation of not only who logged in, but also what that user did in the application.