grep + awk to split on whitespace, last to see login times