SHELL/5/TIMEOUT:[user-name] login from [ip-address] is time out.
The event that the user did not do anything in specified time was record.
The user did not do anything in specified time