Skip to content

[ping_directory] Add support of LDAP Access datastream #20830

Description

@muskan-agarwal26

Add an ldap_access data stream to the ping_directory integration.

Collects PingDirectory LDAP access logs via UDP and logfile (filestream) inputs. Covers LDAP operations such as bind, search, connect, and disconnect.

Includes:

  • UDP and filestream data collection
  • Ingest pipeline with ECS mappings (source.ip, user.dn, event.action, event.outcome, event.duration)
  • Field definitions, pipeline and system tests, sample event, and documentation
  • Dashboard covering LDAP operations over time, operation types and outcomes, most active clients, top search filters, and failures

Part of #19103.

Metadata

Metadata

Labels

New IntegrationIssue or pull request for creating a new integration package.Team:SDE-CrestCrest developers on the Security Integrations team [elastic/sit-crest-contractors]Team:Security-Service IntegrationsSecurity Service Integrations team [elastic/security-service-integrations]enhancementNew feature or request

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions