# CEF Integration Dataset name

**URL:** <https://discuss.elastic.co/t/cef-integration-dataset-name/358230>\
**Category:** Elastic Agent\
**Tags:** integrations\
**Created:** [April 25, 2024, 4:27pm UTC](https://discuss.elastic.co/t/cef-integration-dataset-name/358230 "2024-04-25T16:27:47Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![jsalbre](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jsalbre/32/73479_2.png) [@jsalbre](https://discuss.elastic.co/u/jsalbre)\
**Post date:** [April 25, 2024, 4:27pm UTC](https://discuss.elastic.co/t/cef-integration-dataset-name/358230/1 "2024-04-25T16:27:47Z")

</div>

Is there a hidden configuration setting (or plans to add a configuration setting) to change the dataset name in the CEF integration, like most other integrations? We're stuck with "logs-cef.log-default" for our data stream on anything that is brought in under CEF.

---

<div class="post-metadata">

**Author:** ![leandrojmp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leandrojmp/32/107231_2.png) [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\
**Post date:** [April 26, 2024, 1:48am UTC](https://discuss.elastic.co/t/cef-integration-dataset-name/358230/2 "2024-04-26T01:48:08Z")

</div>

Don't think this is planned, basically everything on an integration like templates and ingest pipelines are tied to the dataset name.

What you can change is just the namespace `default` to another thing, but everything else is tied to the integration.

---

<div class="post-metadata">

**Author:** ![jsalbre](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jsalbre/32/73479_2.png) [@jsalbre](https://discuss.elastic.co/u/jsalbre)\
**Post date:** [April 29, 2024, 1:54pm UTC](https://discuss.elastic.co/t/cef-integration-dataset-name/358230/3 "2024-04-29T13:54:40Z")

</div>

There are many other integrations, for example, Custom API, Custom TCP, and Custom UDP that all allow the dataset name to be changed. The CEF integration seems to be an outlier.
