Event Message:

User Logoff: User Name: user name Domain: name Logon ID: name Logon Type: parameter

Source Event Log Event ID Event Type
Security Security 538 Success Audit

Explanation:

This event record indicates that a user has logged off.