# Integration Error - OpenCTI

**URL:** <https://discuss.elastic.co/t/integration-error-opencti/376591>\
**Category:** Elastic Agent\
**Tags:** integrations\
**Created:** [March 31, 2025, 3:19pm UTC](https://discuss.elastic.co/t/integration-error-opencti/376591 "2025-03-31T15:19:21Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![deathgame](https://avatars.discourse-cdn.com/v4/letter/d/8797f3/32.png) [@deathgame](https://discuss.elastic.co/u/deathgame)\
**Post date:** [March 31, 2025, 3:19pm UTC](https://discuss.elastic.co/t/integration-error-opencti/376591/1 "2025-03-31T15:19:21Z")

</div>

Hello,  
After installing Opencti in a docker environment, I want to get the threat indicators to Elasticsearch. For that, I used the Elastic Agent integration for OpenCTI.  
However, this integration always shows me this error :

> "[  
> failed eval: internal error: runtime error: invalid memory address or nil pointer dereference,  
> Processor "conditional" with tag "" in pipeline "logs-ti\_opencti.indicator-2.1.0" failed with message "Error during CEL program evaluation"  
> ]".

Thanks!

---

<div class="post-metadata">

**Author:** ![deathgame](https://avatars.discourse-cdn.com/v4/letter/d/8797f3/32.png) [@deathgame](https://discuss.elastic.co/u/deathgame)\
**Post date:** [March 31, 2025, 3:20pm UTC](https://discuss.elastic.co/t/integration-error-opencti/376591/2 "2025-03-31T15:20:51Z")

</div>

I see similar post but no response, [Integration Error - OpenCTI](https://discuss.elastic.co/t/integration-error-opencti/359767)