# SentinelOne Integration - Missing Logs

**URL:** <https://discuss.elastic.co/t/sentinelone-integration-missing-logs/322336>\
**Category:** Elastic Agent\
**Tags:** integrations\
**Created:** [January 3, 2023, 5:02am UTC](https://discuss.elastic.co/t/sentinelone-integration-missing-logs/322336 "2023-01-03T05:02:56Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![clintonm9](https://avatars.discourse-cdn.com/v4/letter/c/94ad74/32.png) [@clintonm9](https://discuss.elastic.co/u/clintonm9)\
**Post date:** [January 3, 2023, 5:02am UTC](https://discuss.elastic.co/t/sentinelone-integration-missing-logs/322336/1 "2023-01-03T05:02:56Z")

</div>

I have set up SentinelOne Integration and have enabled all of the log collections. I see logs coming in, but there is not much detail. Does anyone know if more details like you see in S1 console should be ingested?

---

<div class="post-metadata">

**Author:** ![jamie.hynds](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jamie.hynds/32/84205_2.png) [@jamie.hynds](https://discuss.elastic.co/u/jamie.hynds)\
**Post date:** [January 9, 2023, 9:54am UTC](https://discuss.elastic.co/t/sentinelone-integration-missing-logs/322336/2 "2023-01-09T09:54:43Z")

</div>

Hi @clintonm9, welcome to the Elastic Discuss community!

Our SentinelOne integration supports a broad range of event types, such as Activity, Alerts, Group, Threat and Agent events. You should be seeing quite granular details in the events once they are ingested via our integration.

Could you post a sample event (with sensitive information removed) so we can determine the events you are seeing and if they are getting mapped to ECS correctly.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [February 6, 2023, 9:55am UTC](https://discuss.elastic.co/t/sentinelone-integration-missing-logs/322336/3 "2023-02-06T09:55:11Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
