FTP connection log is not recorded.
LOGIN and LOGOUT record are not evident in seaudit
Customer is using vsftpd.
Customer had commented out the following in /etc/pam.d/vsftpd:
#auth include password-auth
...
#account include password-auth
...
#session include password-auth