# Elastic CEF integration.. no messages to elasticsearch

**URL:** <https://discuss.elastic.co/t/elastic-cef-integration-no-messages-to-elasticsearch/340132>\
**Category:** Elastic Observability\
**Tags:** fleet\
**Created:** [August 4, 2023, 12:34pm UTC](https://discuss.elastic.co/t/elastic-cef-integration-no-messages-to-elasticsearch/340132 "2023-08-04T12:34:22Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![mr\_ph](https://avatars.discourse-cdn.com/v4/letter/m/3e96dc/32.png) [@mr\_ph](https://discuss.elastic.co/u/mr_ph)\
**Post date:** [August 4, 2023, 12:34pm UTC](https://discuss.elastic.co/t/elastic-cef-integration-no-messages-to-elasticsearch/340132/1 "2023-08-04T12:34:23Z")

</div>

Hi, team  
I am using ELK 8.9. Also while i am looking into the integration, at the cef integration part after the configuration i am only getting these errors

> > failed to get tcp6 stats from /proc: /proc/net/tcp6 entry not found for [xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx:ABC]

> > failed to get udp6 stats from /proc: /proc/net/udp6 entry not found for [xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx:ABC]

I checked for the file permissions \>\> all okey

What causing this problem?

---

<div class="post-metadata">

**Author:** ![Julia\_Bardi](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/julia_bardi/32/79463_2.png) [@Julia\_Bardi](https://discuss.elastic.co/u/Julia_Bardi)\
**Post date:** [August 22, 2023, 11:29am UTC](https://discuss.elastic.co/t/elastic-cef-integration-no-messages-to-elasticsearch/340132/2 "2023-08-22T11:29:02Z")

</div>

Hi Anand,

This could be a system configuration issue where the required sockets might not be up and listening. This can be confirmed by checking the hosts **/proc/net/tcp**  
by running the command

`cat /proc/net/tcp`

on the agent's host and checking if the missing sockets have an entry or not.

---

<div class="post-metadata">

**Author:** ![anrsec](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/anrsec/32/120638_2.png) [@anrsec](https://discuss.elastic.co/u/anrsec)\
**Post date:** [September 13, 2023, 8:30am UTC](https://discuss.elastic.co/t/elastic-cef-integration-no-messages-to-elasticsearch/340132/3 "2023-09-13T08:30:52Z")

</div>

I'm having the same issue with the VMware vsphere integration for Elastic Agent when trying to collect syslog messages via the tcp input.  
`"failed to get tcp stats from /proc: /proc/net/tcp entry not found for [00000000:2535]"`  
I have not found an entry for this socket in the output of `cat /proc/net/tcp`.  
Any further advice?
