# Elastic Cisco Duo Integration **URL:** \ **Category:** Elastic Agent\ **Created:** [August 23, 2022, 12:33pm UTC](https://discuss.elastic.co/t/elastic-cisco-duo-integration/312703 "2022-08-23T12:33:13Z")\ **Posts on this page:** 6\ **Page:** 1
**Author:** ![suraj.srinivasa](https://avatars.discourse-cdn.com/v4/letter/s/48db29/32.png) [@suraj.srinivasa](https://discuss.elastic.co/u/suraj.srinivasa)\ **Post date:** [August 23, 2022, 12:33pm UTC](https://discuss.elastic.co/t/elastic-cisco-duo-integration/312703/1 "2022-08-23T12:33:13Z")
Hi, I am trying to fetch Cisco Duo logs with the elastic agent integration. The Duo setup in my organization is a managed service by a vendor, so I have received the Integration Key, api hostname and secret key and configured the same on elastic agent as shown below: ![image](https://us1.discourse-cdn.com/elastic/original/3X/b/a/badab436f52ae61e26871db2f423514260740bf7.png) ![image](https://us1.discourse-cdn.com/elastic/original/3X/7/c/7cdd7c2f1b973998e4de5ac85c013351b59f3f4c.png) However I am not seeing any logs coming in from Duo. Is there any way I can confirm from the elastic agent's logs that it is initiating the API calls to Duo? So that I can then check with vendor if permission have been given as required. I enabled debug logging on this agent, but I cannot see any logs related to integrations. I also have Cloudflare integrating enabled on this same agent and those logs are coming in fine. ![image](https://us1.discourse-cdn.com/elastic/original/3X/c/6/c6a4e6db974307ab8f8ce917e8284f37d3b53bca.png) ---
**Author:** ![jamie.hynds](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jamie.hynds/32/84205_2.png) [@jamie.hynds](https://discuss.elastic.co/u/jamie.hynds)\ **Post date:** [August 29, 2022, 11:45am UTC](https://discuss.elastic.co/t/elastic-cisco-duo-integration/312703/2 "2022-08-29T11:45:57Z")
Hi @suraj.srinivasa - can you confirm the format of the hostname you've entered within the integration? I've often seen folks forgetting to include `https://` at the start of the hostname and this causes issues. ---
**Author:** ![suraj.srinivasa](https://avatars.discourse-cdn.com/v4/letter/s/48db29/32.png) [@suraj.srinivasa](https://discuss.elastic.co/u/suraj.srinivasa)\ **Post date:** [August 30, 2022, 8:05am UTC](https://discuss.elastic.co/t/elastic-cisco-duo-integration/312703/3 "2022-08-30T08:05:50Z")
Hi @jamie.hynds, Yes, I had read this was required so I have already added https before my api hostname. I can also see now in the debug logs of the agent that API requests are being made every 5 minutes as configured. But I still cant see the logs coming in, is there any way to inspect the response of the API call being made to Duo by the agent? ---
**Author:** ![jamie.hynds](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jamie.hynds/32/84205_2.png) [@jamie.hynds](https://discuss.elastic.co/u/jamie.hynds)\ **Post date:** [August 30, 2022, 9:32am UTC](https://discuss.elastic.co/t/elastic-cisco-duo-integration/312703/4 "2022-08-30T09:32:31Z")
Hi @suraj.srinivasa, thanks for checking the format of the hostname - always best to run out the simple things first 🙂 The agent logs won't provide much insight into the integration itself. We'll need to see the Filebeat logs running on the local machine (where you have the agent installed). These should be available under /state/data/logs/default/filebeat-\* ---
**Author:** ![suraj.srinivasa](https://avatars.discourse-cdn.com/v4/letter/s/48db29/32.png) [@suraj.srinivasa](https://discuss.elastic.co/u/suraj.srinivasa)\ **Post date:** [August 30, 2022, 1:28pm UTC](https://discuss.elastic.co/t/elastic-cisco-duo-integration/312703/5 "2022-08-30T13:28:36Z")
Thanks @jamie.hynds, these logs helped me pinpoint what exactly was the issue (Misconfigured integration key). Logs are being pulled as expected now. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [September 27, 2022, 1:28pm UTC](https://discuss.elastic.co/t/elastic-cisco-duo-integration/312703/6 "2022-09-27T13:28:37Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.