Custom File stream Integration - Network Shares

erikg
Mon, 29 Sep 2025 15:46:47 +0000
Elastic Agent

Hello,

I am using v1.2.0 of the Custom Logs (Filestream). Normally this integration works for collecting from a local folder, but I can’t seem to grab the logs from a network share.

My first assumption is that perhaps it doesn’t have permissions. But if I recall, elastic agent (priviledged) runs under SYSTEM (windows) or Root (linux). The network share has these permissions but still can’t seem to retrieve the logs.

I enabled the logs from fleet policy, to troubleshoot, but there’s no errors. It reports as healthy but again no data coming in.

The elastic agent version is 8.18.0

2 posts - 1 participant