Hi
I saw some thing which helps in seeing user logon details from runtime.log :
Please check below:
http://virtualkenneth.com/2017/01/10/filtering-and-auditing-within-log-insight/
Please consider marking this answer as correct and helpful if this helps you.
regards
GS