Cross-Stream Lookup

The purpose is to allow one source to fill in the blanks for others. There is an old plugin for this developed by someone else.

https://github.com/jimzz2live/graylog-plugin-slookup-function

So for example, I can pull in ADFS logs from one user, but its missing information about the user, such as the fact the their IP address they got from the guest wireless and their MAC address.