# Mimecast integration no longer ingesting siem logs **URL:** \ **Category:** Elasticsearch\ **Created:** [February 13, 2024, 4:39pm UTC](https://discuss.elastic.co/t/mimecast-integration-no-longer-ingesting-siem-logs/353192 "2024-02-13T16:39:23Z")\ **Posts on this page:** 3\ **Page:** 1
**Author:** ![jeffmaley](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jeffmaley/32/125431_2.png) [@jeffmaley](https://discuss.elastic.co/u/jeffmaley)\ **Post date:** [February 13, 2024, 4:39pm UTC](https://discuss.elastic.co/t/mimecast-integration-no-longer-ingesting-siem-logs/353192/1 "2024-02-13T16:39:23Z")
I'm using the Mimecast integration and it's suddenly stopped ingesting the siem logs. The logs on the elastic agent indicate that events are being published, but they are not showing up in the index in ELK. Has anyone run into this or have any suggestions? ---
**Author:** ![jeffmaley](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jeffmaley/32/125431_2.png) [@jeffmaley](https://discuss.elastic.co/u/jeffmaley)\ **Post date:** [February 14, 2024, 5:27pm UTC](https://discuss.elastic.co/t/mimecast-integration-no-longer-ingesting-siem-logs/353192/2 "2024-02-14T17:27:51Z")
This was a user-error, sort of. Logs _were_ still being ingested, but the agent is working through a massive backlog, as it turns out. Sorting by event.ingested (as suggested on the Elastic Slack) clued me in. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [March 13, 2024, 5:28pm UTC](https://discuss.elastic.co/t/mimecast-integration-no-longer-ingesting-siem-logs/353192/3 "2024-03-13T17:28:41Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.