If you look at audit log of January 16, you can see login history at the bottom as below.
Jan 16 12:18:33 AUDIT@vpncms01.sma local4.info AUDIT: 2025-01-16 12:18:33 +0900 INFO [90000159 (CN=90000159,OU=User,OU=Employee,OU=xxx,DC=xxx,DC=xx)]: Login succeeded - Address=x.x.x.x.x
Jan 16 13:54:46 AUDIT@vpncms01.sma local4.info AUDIT: 2025-01-16 13:54:46 +0900 INFO [90000159 (CN=90000159,OU=User,OU=Employee,OU=xxx,DC=xxx,DC=xx)]: Login succeeded - Address=x.x.x.x
However, there is no logout history for this AD Admin user
Policy_audit log of CMS does not show the logout information correctly, the logs do not show up properly for AD user logout.
Engineering investigation is on and the official fix will be added in the upcoming SMA1000 series June hotfixes.