How to translate SID to user/group name

Graylog Central (peer support)
, , ,
1

Before you post: Your responses to these questions will help the community help you. Please complete this template if you’re asking a support question.
Don’t forget to select tags to help index your topic!

1. Describe your incident:

Take windows event id 4627 as an example，Group Membership displays Windows SID and does not display the group name.It’s not convenient for me to troubleshoot the problem

2. Describe your environment:

  • OS Information:
    Ubuntu 22.04 (Graylog Server）
    Windows Server 2016(sidecar winlogbeat)

  • Package Version:5.2

  • Service logs, configurations, and environment variables:

3
3691×321 24.3 KB

3. What steps have you already taken to try and solve the problem?

4. How can the community help?

Helpful Posting Tips: Tips for Posting Questions that Get Answers [Hold down CTRL and link on link to open tips documents in a separate tab]

2

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.