# Elastic 8.4 / PFSense Agent

**URL:** <https://discuss.elastic.co/t/elastic-8-4-pfsense-agent/318238>\
**Category:** Elastic Agent\
**Tags:** integrations\
**Created:** [November 5, 2022, 4:25pm UTC](https://discuss.elastic.co/t/elastic-8-4-pfsense-agent/318238 "2022-11-05T16:25:34Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![010101](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/010101/32/112977_2.png) [@010101](https://discuss.elastic.co/u/010101)\
**Post date:** [November 5, 2022, 4:25pm UTC](https://discuss.elastic.co/t/elastic-8-4-pfsense-agent/318238/1 "2022-11-05T16:25:34Z")

</div>

So... I setup according to this [pfSense | Elastic docs](https://docs.elastic.co/en/integrations/pfsense)

Pointed my firewall at ELK stack

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/a/9/a9326b7e4c2fb2fa3b8872652f752bb4c7570ac8.png)

But 0 data

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/f/a/fa92476a3e38beb7122ad204e733573cb9844d28.png)

Are there any instructions on how to get this going?

---

<div class="post-metadata">

**Author:** ![bigverm23](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/bigverm23/32/112550_2.png) [@bigverm23](https://discuss.elastic.co/u/bigverm23)\
**Post date:** [November 11, 2022, 1:22am UTC](https://discuss.elastic.co/t/elastic-8-4-pfsense-agent/318238/2 "2022-11-11T01:22:54Z")

</div>

You cant just forward syslogs to elasticsearch. You need a parser like filebeat or logstash to take the syslogs as input then output to elastucsearch.

---

<div class="post-metadata">

**Author:** ![010101](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/010101/32/112977_2.png) [@010101](https://discuss.elastic.co/u/010101)\
**Post date:** [November 11, 2022, 1:39am UTC](https://discuss.elastic.co/t/elastic-8-4-pfsense-agent/318238/3 "2022-11-11T01:39:11Z")

</div>

So I have another linux box with Pfsense Fleet Agent on it and the PFSense firewall pointing to that box. However still nothing in the charts.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [December 9, 2022, 1:39am UTC](https://discuss.elastic.co/t/elastic-8-4-pfsense-agent/318238/4 "2022-12-09T01:39:38Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.