Get user creation dates:
bzgrep "Successfully created user" /var/log/system.log* | awk '{print $1, $2, $3, "-> User Created:", $NF}' | uniq
Get OpenVPN connections per user (newest at bottom):
bzgrep -E "user '.*' authenticated" /var/log/openvpn.log*
