I don’t think NetSuite exposes session data. You could run a login audit search to get the last successful login but that wouldn’t mean the user is still logged in