This is my kibana data I need put condition if deactive = - this user add to active list other wise that user is deactive list suggest me where to put this condition?
So, what you'd like to accomplish is to have two lists of users, one for the list of active users and one for the list of deactive users? Are you trying to have the results in a saved search, or a data table visualization?