# SID To SAMAccountName Translation
**URL:** https://discuss.elastic.co/t/sid-to-samaccountname-translation/162080
**Category:** Beats
**Tags:** winlogbeat
**Created:** [December 25, 2018, 6:05pm UTC](https://discuss.elastic.co/t/sid-to-samaccountname-translation/162080 "2018-12-25T18:05:17Z")
**Posts on this page:** 3
**Page:** 1
### Author:  [@M1kep](https://discuss.elastic.co/u/M1kep)
#### Post date: [December 25, 2018, 6:05pm UTC](https://discuss.elastic.co/t/sid-to-samaccountname-translation/162080/1 "2018-12-25T18:05:18Z")
Hey there!
I've found that WinLogBeat is doing some translation of SID's. I'm hoping to leverage this translation for event logs that have multiple SID's. Ie. Event ID 4757 has an SID field for the member being added.
I'm looking to see if there is any way to leverage the SID lookup for this field as well.
Worst case, I can use logstash to trim down the Distinguished Name that is shipped by default with the event.
Thanks!
---
### Author:  [@andrewkroh](https://discuss.elastic.co/u/andrewkroh)
#### Post date: [December 27, 2018, 2:55pm UTC](https://discuss.elastic.co/t/sid-to-samaccountname-translation/162080/2 "2018-12-27T14:55:15Z")
There's no way to configure Winlogbeat to translate other fields at this time. There is an open feature request that I would like to see implemented. You can follow it at [https://github.com/elastic/beats/issues/7451](https://github.com/elastic/beats/issues/7451).
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [January 24, 2019, 2:55pm UTC](https://discuss.elastic.co/t/sid-to-samaccountname-translation/162080/3 "2019-01-24T14:55:42Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.