# AbuseCH integration issue

**URL:** <https://discuss.elastic.co/t/abusech-integration-issue/385076>\
**Category:** Beats\
**Tags:** packetbeat\
**Created:** [February 17, 2026, 8:59am UTC](https://discuss.elastic.co/t/abusech-integration-issue/385076 "2026-02-17T08:59:46Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![maryam\_naeem](https://avatars.discourse-cdn.com/v4/letter/m/838e76/32.png) [@maryam\_naeem](https://discuss.elastic.co/u/maryam_naeem)\
**Post date:** [February 17, 2026, 8:59am UTC](https://discuss.elastic.co/t/abusech-integration-issue/385076/1 "2026-02-17T08:59:46Z")

</div>

I am using elastic basic plan , but i have a problem being encountered whenever i integrate abusech integration v1.25.0 , i cant see any datastream or data indices , which means the data is not flowing , when i researched i came to the conclusion that we need an authentication api key , for that i opened the abusech auth portal but there is no option to insert that authentication key , for that we need to update , but there is no option to update

---

<div class="post-metadata">

**Author:** ![Tortoise](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tortoise/32/147587_2.png) [@Tortoise](https://discuss.elastic.co/u/Tortoise)\
**Post date:** [February 17, 2026, 9:17am UTC](https://discuss.elastic.co/t/abusech-integration-issue/385076/2 "2026-02-17T09:17:26Z")

</div>

Hello @maryam_naeem

Welcome to the Community!!

Could you please check below post if it can be helpful :

> [@Abuse.ch API key required but no option in integration](https://discuss.elastic.co/t/abuse-ch-api-key-required-but-no-option-in-integration/376165/4):
>
> We've published an update to the AbuseCH integration, which now includes support for the auth keys within the integration configuration. If you update the integration to v2.6.1, you'll see the option there. Thanks for making us aware of the issue on our end elasticheart

> **[abuse.ch integration for Elastic | Elastic integrations](https://www.elastic.co/docs/reference/integrations/ti_abusech#changelog)**
>
> The abuse.ch integration for Elastic allows you to collect logs from abuse.ch, which provides actionable, community-driven threat intelligence data and...

Thanks!!

---

<div class="post-metadata">

**Author:** ![andrewkroh](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/andrewkroh/32/3784_2.png) [@andrewkroh](https://discuss.elastic.co/u/andrewkroh)\
**Post date:** [February 17, 2026, 3:29pm UTC](https://discuss.elastic.co/t/abusech-integration-issue/385076/3 "2026-02-17T15:29:26Z")

</div>

You’ll need a newer version of the integration. Since release v3.0.0 of the `ti_abusech` package the API key is a mandatory setting.

Changelog: [abuse.ch integration for Elastic | Elastic integrations](https://www.elastic.co/docs/reference/integrations/ti_abusech#changelog)

---

<div class="post-metadata">

**Author:** ![leandrojmp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leandrojmp/32/107231_2.png) [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\
**Post date:** [February 17, 2026, 4:29pm UTC](https://discuss.elastic.co/t/abusech-integration-issue/385076/4 "2026-02-17T16:29:52Z")

</div>

What is the stack version that you have?

As mentioned you will need to update the integration, you need to be at least on version 8.18 of the stack to be able to upgrade to the first release where you can use the API Key.