Usage Reports - how to see overages

We just got a QLT bill from Bentley for an overage.

Going through the report various reports I was trying to find the user, workstation, and time of the overage.

Trying to decipher the output from the different reports in Subscription Analytics the closest I got was the Usage Details report. Looking at the date of the overage it's still darn near impossible to figure out where the overage occurred. A lot of our users will only have the application open for about a minute before closing.

Is there any way to get a report that flags the usage that caused the overage?

If not, it sure would be nice to have.