Hi @schose Thanks for the inputs. Yes exactly, I want to recreate identities.csv every week from ldap search query. I already have ldap search query which is correctly populating identities.csv as below. Please confirm if it shall work (recreate new data and remove all old entries) :- |ldapsearch domain=DOMAIN_NAME
search="(&(objectclass=user)(!(objectClass=computer)))"
attrs="sAMAccountName,personalTitle,displayName,givenName,sn,mail,telephoneNumber,mobile,manager,department,whenCreated,userAccountControl"
|makemv userAccountControl
|search userAccountControl="NORMAL_ACCOUNT"
|eval suffix=""
|eval priority="medium"
|eval category="normal"
|eval watchlist="false"
|eval endDate=""
|table
sAMAccountName,personalTitle,displayName,givenName,sn,suffix,mail,telephoneNumber,mobile,manager,priority,department,category,watchlist,whenCreated,endDate
|rename sAMAccountName as identity, personalTitle as prefix, displayName as nick, givenName as first, sn as last, mail as email, telephoneNumber as phone, mobile as phone2, manager as managedBy, department as bunit, whenCreated as startDate | outputlookup createinapp=t indentities.csv I am planning to run it as a scheduled search. Regards, Prathamesh
... View more