# Custom File stream Integration - Network Shares

**URL:** <https://discuss.elastic.co/t/custom-file-stream-integration-network-shares/382288>\
**Category:** Elastic Agent\
**Tags:** integrations\
**Created:** [September 29, 2025, 3:46pm UTC](https://discuss.elastic.co/t/custom-file-stream-integration-network-shares/382288 "2025-09-29T15:46:47Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![erikg](https://avatars.discourse-cdn.com/v4/letter/e/91b2a8/32.png) [@erikg](https://discuss.elastic.co/u/erikg)\
**Post date:** [September 29, 2025, 3:46pm UTC](https://discuss.elastic.co/t/custom-file-stream-integration-network-shares/382288/1 "2025-09-29T15:46:47Z")

</div>

Hello,

I am using v1.2.0 of the Custom Logs (Filestream). Normally this integration works for collecting from a local folder, but I can’t seem to grab the logs from a network share.

My first assumption is that perhaps it doesn’t have permissions. But if I recall, elastic agent (priviledged) runs under SYSTEM (windows) or Root (linux). The network share has these permissions but still can’t seem to retrieve the logs.

I enabled the logs from fleet policy, to troubleshoot, but there’s no errors. It reports as healthy but again no data coming in.

The elastic agent version is 8.18.0

---

<div class="post-metadata">

**Author:** ![erikg](https://avatars.discourse-cdn.com/v4/letter/e/91b2a8/32.png) [@erikg](https://discuss.elastic.co/u/erikg)\
**Post date:** [September 29, 2025, 5:49pm UTC](https://discuss.elastic.co/t/custom-file-stream-integration-network-shares/382288/2 "2025-09-29T17:49:18Z")

</div>

Never mind, I know what it is. It’s the share permissions, but I am considering using unprivileged mode and a separate account instead of SYSTEM