Thank you dude !
Yes,I need to see all accounts apartenent domain admin group and see their connection. Yes on the log of my ad it’s possible ?
After i have one other question 
sorry
How to send the logs of an input to a specific index? What are the rules declare in the stream ?
Thank for your time