Use Netflow and send the records to a server with a Netflow analyzer. PRTG free edition can do this easily.
You won't get userids as the ASA typically does not have any llnkage to the your directory server and login audit records that would tell it the IP-username mapping. Also, Netflow does not capture userids even if the ASA knows them.
If you use the FirePOWER module on your 5508-X, you can integrate it into AD and get usernames in Connection reports.