{"action":"opened","issue":{"url":"https://api.github.com/repos/elastic/logstash/issues/3582","labels_url":"https://api.github.com/repos/elastic/logstash/issues/3582/labels{/name}","comments_url":"https://api.github.com/repos/elastic/logstash/issues/3582/comments","events_url":"https://api.github.com/repos/elastic/logstash/issues/3582/events","html_url":"https://github.com/elastic/logstash/issues/3582","id":94031879,"number":3582,"title":"new filter :: LDAPresolve.","user":{"login":"EricDeveaud","id":6849075,"avatar_url":"https://avatars.githubusercontent.com/u/6849075?v=3","gravatar_id":"","url":"https://api.github.com/users/EricDeveaud","html_url":"https://github.com/EricDeveaud","followers_url":"https://api.github.com/users/EricDeveaud/followers","following_url":"https://api.github.com/users/EricDeveaud/following{/other_user}","gists_url":"https://api.github.com/users/EricDeveaud/gists{/gist_id}","starred_url":"https://api.github.com/users/EricDeveaud/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/EricDeveaud/subscriptions","organizations_url":"https://api.github.com/users/EricDeveaud/orgs","repos_url":"https://api.github.com/users/EricDeveaud/repos","events_url":"https://api.github.com/users/EricDeveaud/events{/privacy}","received_events_url":"https://api.github.com/users/EricDeveaud/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":0,"created_at":"2015-07-09T12:15:02Z","updated_at":"2015-07-09T12:15:02Z","closed_at":null,"body":"As we had the need to resolve user name, and unix group from some application logs with just the uidNumber, we developed a logstash plugin to fullfill our needs.\r\n\r\nhttps://github.com/EricDeveaud/logstash_filter_LDAPresolve\r\n\r\nI would like to have feedback, review, tests, comments and suggestion on this one. \r\n\r\n   Regards\r\n\r\n## Example\r\nassume we have on LDAPS (with no authent) an user John DOE with uidNumber 25377 that pertains to group nobody For example with following envent structure.\r\n\r\n```\r\n {\r\n     \"@version\" => \"1\",\r\n   \"@timestamp\" => \"2015-06-29:00:00.000Z\",\r\n   \"some_infos\" => 'foo bar\"\r\n }\r\n```\r\nand the following init configuration\r\n```\r\nLDAPresolve {\r\n    uidNumber => 25377\r\n    host      => \"ldaps.pasteur.fr\"\r\n    userdn    => \"ou=utilisateurs,dc=pasteur,dc=fr\"\r\n    groupdn   => \"ou=entites,ou=groupes,dc=pasteur,dc=fr\"\r\n}\r\n```\r\nwe will get this output\r\n```\r\n {\r\n     \"@version\" => \"1\",\r\n   \"@timestamp\" => \"2015-06-29:00:00.000Z\",\r\n   \"some_infos\" => 'foo bar\"\r\n         \"user\" => \"John DOE\"\r\n        \"group\" => \"nobody\"\r\n        \"login\" => \"jdoe\"\r\n }\r\n```\r\n\r\n"}}