# TCP input failed with Checkpoint syslog integration

**URL:** <https://discuss.elastic.co/t/tcp-input-failed-with-checkpoint-syslog-integration/337609>\
**Category:** Beats\
**Tags:** docker, filebeat\
**Created:** [July 5, 2023, 6:04am UTC](https://discuss.elastic.co/t/tcp-input-failed-with-checkpoint-syslog-integration/337609 "2023-07-05T06:04:50Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![adub08](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/adub08/32/123023_2.png) [@adub08](https://discuss.elastic.co/u/adub08)\
**Post date:** [July 5, 2023, 6:04am UTC](https://discuss.elastic.co/t/tcp-input-failed-with-checkpoint-syslog-integration/337609/1 "2023-07-05T06:04:50Z")

</div>

Hi  
I've been unable to setup the Checkpoint Elastic integration due to this error.

> [elastic\_agent.filebeat][error] Input 'tcp' failed with: context canceled

**Settings** :  
Integration info:  
logfile: disabled  
UDP: disabled

TCP:

- Syslog Host: 0.0.0.0 or localhost or (10.x.x.x)
- Syslog Port: 9001 or 5514
- _All other settings default_

**Platform info:**  
Elastic Agent 8.7.1 - Installed on Red Hat Enterprise Linux release 9.1 _Using rpm package_

Also reproduced the error with docker-elastic-agent-8.7.1, docker-elastic-agent-complete-8.7.1, docker-elastic-agent-8.7.0

**Elastic Agent inspect:** _IP address has been obfuscated_

```auto
- data_stream:
    namespace: default
  id: tcp-checkpoint-4ac55184-d551-4520-85bf-ce913c5afda4
  meta:
    package:
      name: checkpoint
      version: 1.19.0
  name: checkpoint
  package_policy_id: 4ac55184-d551-4520-85bf-ce913c5afda4
  revision: 4
  streams:
  - data_stream:
      dataset: checkpoint.firewall
      type: logs
    fields:
      _conf:
        tz_offset: UTC
    fields_under_root: true
    host: 10.x.x.x:9001
    id: tcp-checkpoint.firewall-4ac55184-d551-4520-85bf-ce913c5afda4
    processors:
    - add_locale: null
    publisher_pipeline.disable_host: true
    ssl: null
    tags:
    - forwarded
  type: tcp
  use_output: default

```

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [August 2, 2023, 8:05am UTC](https://discuss.elastic.co/t/tcp-input-failed-with-checkpoint-syslog-integration/337609/2 "2023-08-02T08:05:28Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.