Hi,
I have a use case where user has been removed from the LDAP , but when we check in the user via setting , we see the user still exists
Ideally automatically user should also be removed from splunk
That's normal. Splunk consults the LDAP server when a user logs in, but the LDAP server does not notify Splunk when a user is removed (or added).
Once you've reassigned the user's assets to another user, you can delete the user manually.