/user/active/request-logout [find]
action failed (6)

::foreach item in=[/user/active find] do={:if ([/user find name=[/user/active get $item]->"name"]) do={} else={:put "Warning: found a removed user(s) being still be logged in: $[:tostr [/user/active get $item]]"}}
Warning: found a removed user that is still logged in: .id=*3;address=192.192.0.11;group=winbox;name=test;radius=false;via=winbox;when=2023-08-07 12:01:38

:foreach item in=[/user/active find] do={:if ([/user find group=[/user/active get $item]->"group"]) do={} else={:put "Warning: found a logged in user using a wrong group. Ask user to disconnect and reconnect to the services: $[:tostr [/user/active get $item]]"}}

/user/active {:local lsess [print as-value where name~".*"]; :foreach i in=$lsess do={:do { 
        request-logout ($i->".id")
    } on-error={}}}

:foreach item in=[/user/active find] do={:if ([/user find name=[/user/active get $item]->"name"]) do={} else={:do {/user/active request-logout $item} on-error={:put "bugger"}}}
bugger
01:12:47 echo: system,error,critical login failure for user test from 192.168.0.11 via local 

:foreach item in=[/user/active find] do={:if ([/user find name=[/user/active get $item]->"name" disabled] ) do={:do {/user/active request-logout $item} on-error={:put "bugger"}}} 

# activate reading the .id from global
:global eventPathUser;

# remove previous running event scripts (:execute)
:do { /system script job remove $eventPathUser } on-error={:log error "Script .id not found"}

:global eventPathUser [:execute {
          /user print follow-only [:foreach item in=[/user/active find] do={
          	#disabled user
                :if ([/user find name=[/user/active get $item]->"name" disabled] ) do={
                     :do {/user/active request-logout $item} on-error={}}
                # removed user
                :if ([/user find name=[/user/active get $item]->"name"]) do={} else={
                :do {/user/active request-logout $item} on-error={}}
                     
                         }; # end foreach
                        ]; # end print
                      };  # end execute
         ]; # end eventpath

 /system script job remove $eventPathUser