# Okta log Intergration

**URL:** <https://discuss.elastic.co/t/okta-log-intergration/316830>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [October 17, 2022, 10:14pm UTC](https://discuss.elastic.co/t/okta-log-intergration/316830 "2022-10-17T22:14:44Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![sean.doody](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/sean.doody/32/97487_2.png) [@sean.doody](https://discuss.elastic.co/u/sean.doody)\
**Post date:** [October 17, 2022, 10:14pm UTC](https://discuss.elastic.co/t/okta-log-intergration/316830/1 "2022-10-17T22:14:45Z")

</div>

Hello, I am trying to test getting Okta logs to Elastic, when trying to do so, it doesnt seem like Elastic wants to ingest the logs. I am currently just testing off a work laptop, but one I get this figured out I will use AWS to host the elastic agent. Below is the error I am getting. I added my API key to the integration as well as the URL for the logs. We use a cloud hosted platform. Any help in the right direction would be appreciated. Thank you. Below a copy of the logs

Error while processing http request: failed to execute rf.collectResponse: failed to execute http client.Do: failed to execute http client.Do: Get "[company.okta.com/api/v1/logs\*?limit=1000&since=2022-10-16T22%3A03%3A51Z](http://company.okta.com/api/v1/logs*?limit=1000&since=2022-10-16T22%3A03%3A51Z)": Get "comapny.oktacom/api/v1/logs\*?limit=1000&since=2022-10-16T22%3A03%3A51Z": unsupported protocol scheme ""

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [October 17, 2022, 10:23pm UTC](https://discuss.elastic.co/t/okta-log-intergration/316830/2 "2022-10-17T22:23:04Z")

</div>

Can you share your config an the full Filebeat log?

---

<div class="post-metadata">

**Author:** ![sean.doody](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/sean.doody/32/97487_2.png) [@sean.doody](https://discuss.elastic.co/u/sean.doody)\
**Post date:** [October 18, 2022, 6:59pm UTC](https://discuss.elastic.co/t/okta-log-intergration/316830/3 "2022-10-18T18:59:16Z")

</div>

![Screen Shot 2022-10-18 at 1.58.23 PM](https://us1.discourse-cdn.com/elastic/original/3X/9/2/92fa4bb8141c48da8cf48e8944c01a90c21afbc6.png)

Attached is the remainder of missing logs, config of what to be exact?

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [October 19, 2022, 3:18am UTC](https://discuss.elastic.co/t/okta-log-intergration/316830/4 "2022-10-19T03:18:26Z")

</div>

Please don't post pictures of text, logs or code. They are difficult to read, impossible to search and replicate (if it's code), and some people may not be even able to see them 🙂

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [November 16, 2022, 3:19am UTC](https://discuss.elastic.co/t/okta-log-intergration/316830/5 "2022-11-16T03:19:11Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.