# Custom UDP with PANW integration **URL:** \ **Category:** Elastic Agent\ **Created:** [October 2, 2023, 9:19am UTC](https://discuss.elastic.co/t/custom-udp-with-panw-integration/344214 "2023-10-02T09:19:00Z")\ **Posts on this page:** 6\ **Page:** 1
**Author:** ![Patryk\_Ostrowski](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/patryk_ostrowski/32/111965_2.png) [@Patryk\_Ostrowski](https://discuss.elastic.co/u/Patryk_Ostrowski)\ **Post date:** [October 2, 2023, 9:19am UTC](https://discuss.elastic.co/t/custom-udp-with-panw-integration/344214/1 "2023-10-02T09:19:00Z")
Hello, I used PANOS integration that work great for me. Now I want to change my configuration and use Custom UDP Logs integration. In advanced options I changed Ingest pipelines "logs-udp.generic@custom". ![image](https://us1.discourse-cdn.com/elastic/original/3X/7/d/7d27f89359fbe36c60ebc37bc4885dd9022a3624.png) I also tested pipeline adding the document that was indexed by Custom UDP Logs integration, and it worked. But unfortunately when I saved this, I cannot find my logs. Could you confirm me, how can I added integration to custom udp integration. Is adding a custom pipeline enough? ---
**Author:** ![stephenb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/32/40856_2.png) [@stephenb](https://discuss.elastic.co/u/stephenb)\ **Post date:** [October 2, 2023, 2:57pm UTC](https://discuss.elastic.co/t/custom-udp-with-panw-integration/344214/2 "2023-10-02T14:57:13Z")
Hi @Patryk_Ostrowski Can you show us the configuration as well? ![Screenshot 2023-10-02 at 7.54.22 AM](https://us1.discourse-cdn.com/elastic/original/3X/4/2/42e3c2d32c87268e5c4987b1cd25437d64259f43.png) If you did not change anything else I would expect the logs to end up in the data stream `logs-udp.generic-default` ---
**Author:** ![Patryk\_Ostrowski](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/patryk_ostrowski/32/111965_2.png) [@Patryk\_Ostrowski](https://discuss.elastic.co/u/Patryk_Ostrowski)\ **Post date:** [October 4, 2023, 5:07am UTC](https://discuss.elastic.co/t/custom-udp-with-panw-integration/344214/3 "2023-10-04T05:07:24Z")
Thanks, It's working, but I cannot find my logs because I had a problem with time. Logs were putting to future date. But could you explain me what is difference between Ingest Pipeline field in Custom UDP Settings and Ingest piplines (in advanced options) with editing logs-udp.generic@custom ? ---
**Author:** ![stephenb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/32/40856_2.png) [@stephenb](https://discuss.elastic.co/u/stephenb)\ **Post date:** [October 4, 2023, 1:59pm UTC](https://discuss.elastic.co/t/custom-udp-with-panw-integration/344214/4 "2023-10-04T13:59:24Z")
> [@Patryk\_Ostrowski](#): > > But could you explain me what is difference between Ingest Pipeline field in Custom UDP Settings and Ingest piplines (in advanced options) with editing logs-udp.generic@custom ? Yes is is a bit of an overlap... here is how I see it. The one in the Ingest Pipeline field is for that specific UDP integration, The `logs-udp.generic@custom` is one that would get applied at the end for Every UDP integration. At least that is how I think of it.... like a "final" pipeline. ---
**Author:** ![Patryk\_Ostrowski](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/patryk_ostrowski/32/111965_2.png) [@Patryk\_Ostrowski](https://discuss.elastic.co/u/Patryk_Ostrowski)\ **Post date:** [October 17, 2023, 12:19pm UTC](https://discuss.elastic.co/t/custom-udp-with-panw-integration/344214/5 "2023-10-17T12:19:41Z")
Thanks for your anserw ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [November 14, 2023, 12:20pm UTC](https://discuss.elastic.co/t/custom-udp-with-panw-integration/344214/6 "2023-11-14T12:20:42Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.