I'm sorry to tell you it can't be configured because that feature doesn;t exist. There is an event generated when a user logs in that can be seen in the event database, aong with a boatload of other system events (show events past 23:59), but no command history logs.

For a security device, it has very little security in and of itself. No AAA, multiple logins on the same username permitted, no forced password change (unless you count the default password).