two options have been discussed:

#1) Basic Log of Logins
-writes logins to a separate .log file, users could open the file and read through text entries to find useful information
-malicious users could easily edit the file if they wanted to purposely delete the login activity

#2) Put the Log into Database and create a viewing tool
-the data would be logged to a table in the database
-a basic UI with data filters would list the login activity for admin users
-malicious users would need to access the database directly to modify this data; not impossible but much harder than editing a file.