# Detecting inactive users in Active Directory

**URL:** <https://discuss.elastic.co/t/detecting-inactive-users-in-active-directory/323650>\
**Category:** SIEM\
**Tags:** elastic-stack-alerting\
**Created:** [January 21, 2023, 2:33pm UTC](https://discuss.elastic.co/t/detecting-inactive-users-in-active-directory/323650 "2023-01-21T14:33:41Z")\
**Posts on this page:** 1\
**Showing post:** 7

<div class="post-metadata">

**Author:** ![jamesspi](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jamesspi/32/24479_2.png) [@jamesspi](https://discuss.elastic.co/u/jamesspi)\
**Post date:** [January 25, 2023, 12:29am UTC](https://discuss.elastic.co/t/detecting-inactive-users-in-active-directory/323650/7 "2023-01-25T00:29:39Z")

</div>

Transform will look something like this

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/d/f/dfae3aa26a9c4281ad3d802297ab242b69f569f0.png)

And the results:

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/d/3/d3e750049bd833843241d27e08f3930e5ff10481.jpeg)

---

_[View the full topic](https://discuss.elastic.co/t/detecting-inactive-users-in-active-directory/323650)._