# Ingest Pipeline ID not working for UDP Integration

**URL:** <https://discuss.elastic.co/t/ingest-pipeline-id-not-working-for-udp-integration/296668>\
**Category:** Beats\
**Tags:** elastic-agent\
**Created:** [February 8, 2022, 11:21pm UTC](https://discuss.elastic.co/t/ingest-pipeline-id-not-working-for-udp-integration/296668 "2022-02-08T23:21:41Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![bm11100](https://avatars.discourse-cdn.com/v4/letter/b/b3f665/32.png) [@bm11100](https://discuss.elastic.co/u/bm11100)\
**Post date:** [February 8, 2022, 11:21pm UTC](https://discuss.elastic.co/t/ingest-pipeline-id-not-working-for-udp-integration/296668/1 "2022-02-08T23:21:41Z")

</div>

Hello,

We are using the Custom UDP integration in Fleet to ingest logs from Untangle firewalls.

I've created an ingest pipeline, called Untangle, that should parse the message field sent over from the integration.

When I test the pipeline in the UI it works as intended.

Also, if i run `POST logs-udp.untangle-default/_update_by_query?pipeline=Untangle`, it also works correctly.

The issue is if i add the pipeline id to the integration, it does not work. Are there any known issues around adding pipeline id to the custom UDP Integration?

![image](https://us1.discourse-cdn.com/elastic/original/3X/0/0/001f3f71c7ca50e49292f3fbf6651050e0617040.png)

Thanks

---

<div class="post-metadata">

**Author:** ![legoguy1000](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/legoguy1000/32/54301_2.png) [@legoguy1000](https://discuss.elastic.co/u/legoguy1000)\
**Post date:** [February 9, 2022, 3:06am UTC](https://discuss.elastic.co/t/ingest-pipeline-id-not-working-for-udp-integration/296668/2 "2022-02-09T03:06:08Z")

</div>

Its because the beats code lowercases the pipeline name and Elasticsearch is case sensitive. See [https://github.com/elastic/beats/issues/26570](https://github.com/elastic/beats/issues/26570).

---

<div class="post-metadata">

**Author:** ![bm11100](https://avatars.discourse-cdn.com/v4/letter/b/b3f665/32.png) [@bm11100](https://discuss.elastic.co/u/bm11100)\
**Post date:** [February 9, 2022, 4:48am UTC](https://discuss.elastic.co/t/ingest-pipeline-id-not-working-for-udp-integration/296668/3 "2022-02-09T04:48:00Z")

</div>

Wow, I spent way too much time on this. Works with lowercase, thanks.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [March 9, 2022, 6:48am UTC](https://discuss.elastic.co/t/ingest-pipeline-id-not-working-for-udp-integration/296668/4 "2022-03-09T06:48:32Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.