F5 logs - search query
Have you got APM, or just LTM? APM is normally where user sessions come in.
But if you have LTM, dependant on how your application manages users you might be able to see usernames in the url or http header which you could get a iRule to try to identify and log.
Other than that, you're really down to application server logs and not the f5.