new_contents: #!/usr/bin/env python
  
  # This Source Code Form is subject to the terms of the Mozilla Public
  # License, v. 2.0. If a copy of the MPL was not distributed with this
  # file, You can obtain one at http://mozilla.org/MPL/2.0/.
  # Copyright (c) 2014 Mozilla Corporation
  #
  # Contributors:
  # Jeff Bryner jbryner@mozilla.com
  
  from lib.alerttask import AlertTask
  import pyes
  
  class ldapGroupModify(AlertTask):
      def main(self):
          # look for events in last x 
          date_timedelta = dict(minutes=15)
          # Configure filters using pyes
          must = [
              pyes.TermFilter('category', 'ldapChange'),
              pyes.TermFilter('changetype', 'modify'),
              pyes.QueryFilter(pyes.MatchQuery("summary","groups")) 
          ]
          self.filtersManual(date_timedelta, must=must)
  
          # Search events
          self.searchEventsSimple()
          self.walkEvents()
  
      # Set alert properties
      def onEvent(self, event):
          category = 'ldap'
          tags = ['ldap']
          severity = 'INFO'
          summary='{0}'.format(event['_source']['summary'])
  
          # Create the alert object based on these properties
          return self.createAlertDict(summary, category, tags, [event], severity)
  
subject: update to a more universal match