Unknown attribute issue LDAP integration with Active Directory

if you just want a simple “if user is in group $foo allow access to graylog” filter: LDAP Query Group