you might try to intercept a deconection from the POST data, and try to add an action for ws : in short intercept before the logout_user() call

Hi,
maybe my response is outdated
My solution was to modify  main.inc.php in log_failed_logins:

// HaWo ++
add_event_handler('login_success', 'log_success_logins_log');
// HaWo --

and a 'new' function

// HaWo ++
function log_success_logins_log()
{
  global $conf;

  $myFile = $conf['logFailedLoginsFilename'];

  // if a logfile parameter is defined
  if ($myFile <> "") {
    $remoteIpAddress = $_SERVER['REMOTE_ADDR'];
    $userName = $_POST['username'];
    // Example: 2015/06/14 22:32:33 ip=192.168.1.100 username=Admin
    $logline = date("Y/m/d H:i:s")." ip=".$remoteIpAddress." Success: username=".$userName."\n";

    // try opening the file and append a new logline
    $fh = fopen($myFile, 'a');
    if ($fh) {
      fwrite($fh, $logline);
      fclose($fh);
    }
  }
}
// HaWo --