@Powderman no issues with the users table?

@8p8c @atom disabling our user_monitoring pack lead to a 10-15% reduction in ldap lookups. did not expect that but i suppose with sudo-ldap integration it makes some sense

i think it makes sense especially if it's _user_events_ with joins against the users table. i'd be cautious with join statements in any _*_events_ tables.