We should probably hold a Last Seen on the InstanceCharacterAggregatate which shows the last time the person was seen, the accout the XPM metrics based off that rather than first time seen.
https://i.imgur.com/WdPYznk.png
I actually only played this alert for about 20 minutes, Time played is going off first seen not last seen.