Advanced Analytics doesn't ingest the client events data today, it is something that is being worked on but today you'd need to leverage the Client Events API to extract the data then calculate the differences in time between enabling and disabling using the extracted data.

https://docs.netskope.com/en/get-client-data.html

That said though, v105 does include functionality that will force the client to restart on reboot/login.  Which should reduce your need to track this. 
https://docs.netskope.com/en/new-features-and-enhancements-in-release-105-0-0.html#UUID-de2ad2ee-c368-ade7-34dd-990bb8faf7f3_section-idm4523901913168033689851060673 

But, yes, I too wish the Client events were exposed through AA.   Is there an NPLAN for us to track @myee ?

@qyost yes, there is an existing NPLAN.  The reference number is NPLAN-1156, current ETA is Q2 (plan subject to change at PM discretion).

You can do this fairly easily via REST API. It is possible to query by endpoint event of 'user disabled', the query will also return the user ID and machine name. From there you can handle it as a one-off, or automate it to send an email to the user to remind them to enable the client or create a helpdesk ticket for example...