# Elastic Agent on Mac in failed state

**URL:** <https://discuss.elastic.co/t/elastic-agent-on-mac-in-failed-state/385255>\
**Category:** Elastic Agent\
**Tags:** elastic-stack-alerting\
**Created:** [February 26, 2026, 6:06pm UTC](https://discuss.elastic.co/t/elastic-agent-on-mac-in-failed-state/385255 "2026-02-26T18:06:03Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![HaydenB0101](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/haydenb0101/32/146069_2.png) [@HaydenB0101](https://discuss.elastic.co/u/HaydenB0101)\
**Post date:** [February 26, 2026, 6:06pm UTC](https://discuss.elastic.co/t/elastic-agent-on-mac-in-failed-state/385255/1 "2026-02-26T18:06:03Z")

</div>

Hello, I am using the `Custom macOS Unified Logs` integration with elastic 8.18.8 in order to get logs from my mac device, and I getting errors from the agent

```auto
elastic-agent status
fleet
  status: (HEALTHY) Connected 
elastic-agent
  status: (DEGRADED) 1 or more components/units in a failed state
  unifiedlogs-so-manager_logstash  
  status: (HEALTHY) Healthy: communicating with pid '10838'
  unifiedlogs-so-manager_logstash-unifiedlogs-unifiedlogs-a963fc35-601c-43a7-a43e-feca5068d08a
  status: (FAILED) decoding error: decoding failed due to the following error(s):
    'streams[0].source' expected a map or struct, got "bool"

```

Is the problem from the integration or the device itself? I tested having it send logs/metrics and it communicates fine.

I was also wondering if there are any integrations that work well with Macs since many of the integrations don’t have OS/Hardware compatibility listed

---

<div class="post-metadata">

**Author:** ![HaydenB0101](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/haydenb0101/32/146069_2.png) [@HaydenB0101](https://discuss.elastic.co/u/HaydenB0101)\
**Post date:** [February 26, 2026, 6:17pm UTC](https://discuss.elastic.co/t/elastic-agent-on-mac-in-failed-state/385255/2 "2026-02-26T18:17:22Z")

</div>

Found a Github Post relating to the integration.

[Enabling "Include Source" in Custom macOS Unified Logs Integration Causes Agent Failure · Issue #47296 · elastic/beats](https://github.com/elastic/beats/issues/47296)