# ELK to resolve IIS username to show fullname of the user

**URL:** https://discuss.elastic.co/t/elk-to-resolve-iis-username-to-show-fullname-of-the-user/172030
**Category:** Logstash
**Created:** [March 12, 2019, 9:12pm UTC](https://discuss.elastic.co/t/elk-to-resolve-iis-username-to-show-fullname-of-the-user/172030 "2019-03-12T21:12:10Z")
**Posts on this page:** 1
**Showing post:** 2

<div class="post-metadata">

### Author: ![Badger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/badger/32/25190_2.png) [@Badger](https://discuss.elastic.co/u/Badger)
#### Post date: [March 12, 2019, 10:06pm UTC](https://discuss.elastic.co/t/elk-to-resolve-iis-username-to-show-fullname-of-the-user/172030/2 "2019-03-12T22:06:11Z")

</div>

Take a look at [this](https://discuss.elastic.co/t/how-to-get-username-from-guid-with-winlogbeats-sending-to-logstash/165813) thread, which is solving a slightly different problem. It suggests exporting AD data and then using either a translate filter or an elasticsearch lookup into the exported data.

---

_[View the full topic](https://discuss.elastic.co/t/elk-to-resolve-iis-username-to-show-fullname-of-the-user/172030)._