--- title: Supported datadog.yaml Configuration Fields description: Reference of the Agent configuration fields supported by Fleet Automation. breadcrumbs: Docs > Agent > Fleet Automation > Supported datadog.yaml Configuration Fields --- > For the complete documentation index, see [llms.txt](https://docs.datadoghq.com/llms.txt). # Supported datadog.yaml Configuration Fields {% callout %} # Important note for users on the following Datadog sites: app.ddog-gov.com, us2.ddog-gov.com {% alert level="danger" %} This product is not supported for your selected [Datadog site](https://docs.datadoghq.com/getting_started/site.md). ({% placeholder "user-datadog-site-name" /%}). {% /alert %} {% /callout %} Fleet Automation supports a subset of `datadog.yaml` fields when you [configure Agents](https://docs.datadoghq.com/agent/fleet_automation/configure_agents.md). Every change you supply is validated against a schema, and any field not listed here is rejected with a schema validation error. Expand a section below to see each supported field with its type, description, and valid values. ## Top-level fields{% #top-level-fields %} {% collapsible-section %} Show 38 fields | Field | Type | Description | | ------------------------------------- | ------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | `check_runners` | number | Number of concurrent check runners for executing integrations.**Valid values**: 1–1000 | | `cloud_provider_metadata` | array[string] | List of cloud providers to query for metadata (aws, gcp, azure, etc.). | | `cmd_port` | number | Port for the Agent's internal command API.**Valid values**: 1–65535 | | `collect_ec2_tags` | boolean | Flag to enable collection of AWS EC2 custom tags as host tags. | | `collect_ec2_tags_use_imds` | boolean | Flag to use EC2 Instance Metadata Service instead of API for tag collection. | | `dd_url` | string | The host of the Datadog intake server to send Agent data to. Restricted to datadoghq.com subdomains, for DNS-failover (DDR) setups. | | `dogstatsd_non_local_traffic` | boolean | Flag to allow DogStatsD to accept non-local UDP traffic. | | `dogstatsd_origin_detection` | boolean | When using Unix Socket, DogStatsD can tag metrics with container metadata. If running DogStatsD in a container, host PID mode (e.g. with --pid=host) is required. Only supported for socket traffic. | | `dogstatsd_port` | number | Port number for the DogStatsD server to listen on.**Valid values**: 1–65535 | | `dogstatsd_socket` | string | Unix socket path for DogStatsD communication. | | `dogstatsd_stats_enable` | boolean | Flag to enable DogStatsD internal statistics collection. | | `dogstatsd_stats_port` | number | Port for DogStatsD statistics go_expvar server.**Valid values**: 1–65535 | | `dogstatsd_tags` | array | List of tags to be applied to all DogStatsD metrics. | | `ec2_metadata_timeout` | string | Timeout for calls to AWS EC2 metadata endpoints. | | `ecs_collect_resource_tags_ec2` | string | Configuration for collecting ECS resource tags on EC2 launch type. | | `ecs_task_collection_enabled` | boolean | Flag to enable ECS task collection for the orchestrator check. | | `env` | string | The environment name where the agent is running. | | `exclude_gce_tags` | array[string] | List of GCE metadata attributes to exclude from host tags. | | `expvar_port` | number | Port for the Agent's go_expvar debug server.**Valid values**: 1–65535 | | `extra_tags` | array | Additional tags to be applied to all data sent by the Agent. | | `forwarder_connection_reset_interval` | integer | Interval in seconds after which forwarder connections to Datadog are reset. 0 disables the reset.**Valid values**: ≥ 0 | | `histogram_aggregates` | array[string] | List of histogram aggregations to compute for DogStatsD. | | `histogram_percentiles` | array[string] | List of percentiles to compute for DogStatsD histograms. | | `hostname_fqdn` | boolean | When the Agent relies on the OS to determine the hostname, make it use the FQDN instead of the short hostname. | | `infrastructure_mode` | string | The monitoring mode the agent is configured in, each mode offers different amount of feature (default is full, other potential values are end_user_device, basic, or cloud_cost_only).**Valid values**: `basic`, `full`, `end_user_device`, `cloud_cost_only`, `none` | | `log_file_max_rolls` | number | Maximum number of old log files to keep after rotation.**Valid values**: 0–1000 | | `log_file_max_size` | string | Maximum size for Agent log files before rotation. | | `log_level` | string | Minimum log level for the Datadog Agent.**Valid values**: `off`, `critical`, `error`, `warn`, `info`, `debug`, `trace` | | `log_to_console` | boolean | Flag to enable logging to standard output. | | `log_to_syslog` | boolean | Flag to enable logging to syslog. | | `logs_enabled` | boolean | Flag to enable or disable log collection. | | `max_events_per_second` | number | Maximum number of APM events to sample per second.**Valid values**: 0–1000000000 | | `min_tls_version` | string | Minimum TLS version for connections to Datadog intake. | | `open_files_limit` | number | Maximum number of files the Agent can keep open simultaneously.**Valid values**: 0–1000000 | | `tags` | array | List of tags to be applied to all data sent by the Agent. | | `use_diskv2_check` | boolean | Flag to enable or disable the Go core disk check. When disabled, the Python disk check is used instead. | | `use_dogstatsd` | boolean | Flag to enable or disable the DogStatsD server. | | `use_networkv2_check` | boolean | Flag to enable or disable the Go core network check. When disabled, the Python network check is used instead. | {% /collapsible-section %} ## APM (`apm_config`){% #apm-apm_config %} {% collapsible-section %} Show 14 fields | Field | Type | Description | | ------------------------------------------------------ | ------------- | ------------------------------------------------------------------------------------------------------------------------------------- | | `apm_config.apm_dd_url` | string | The host of the Datadog trace intake server to send traces to. Restricted to datadoghq.com subdomains, for DNS-failover (DDR) setups. | | `apm_config.apm_non_local_traffic` | boolean | Flag to allow APM Agent to listen for non-local traffic. | | `apm_config.connection_reset_interval` | integer | Interval in seconds after which the trace agent connection to Datadog is reset. 0 disables the reset.**Valid values**: ≥ 0 | | `apm_config.enabled` | boolean | Flag to enable or disable APM. | | `apm_config.env` | string | The environment tag that Traces should be tagged with. | | `apm_config.extra_sample_rate` | number | Additional sampling rate multiplier for trace collection.**Valid values**: 0–100 | | `apm_config.filter_tags.reject` | array[string] | List of tag patterns to reject traces. | | `apm_config.ignore_resources` | array[string] | List of regular expressions to exclude traces based on their resource name. | | `apm_config.max_traces_per_second` | number | Maximum number of traces to sample per second.**Valid values**: 0–1000000000 | | `apm_config.obfuscation.http.remove_paths_with_digits` | boolean | Flag to obfuscate URL path segments containing digits. | | `apm_config.obfuscation.http.remove_query_string` | boolean | Flag to remove query strings from HTTP URLs. | | `apm_config.obfuscation.remove_stack_traces` | boolean | Flag to remove stack traces from span data. | | `apm_config.receiver_port` | number | Port number for the trace receiver to listen on.**Valid values**: 1–65535 | | `apm_config.receiver_socket` | string | Unix Domain Socket path for receiving traces. | {% /collapsible-section %} ## Compliance (`compliance_config`){% #compliance-compliance_config %} {% collapsible-section %} Show 1 fields | Field | Type | Description | | --------------------------- | ------- | -------------------------------------------- | | `compliance_config.enabled` | boolean | Flag to enable or disable compliance checks. | {% /collapsible-section %} ## Container Image (`container_image`){% #container-image-container_image %} {% collapsible-section %} Show 1 fields | Field | Type | Description | | ------------------------- | ------- | --------------------------------------------------- | | `container_image.enabled` | boolean | Flag to enable or disable container image scanning. | {% /collapsible-section %} ## `data_security`{% #data_security %} {% collapsible-section %} Show 1 fields | Field | Type | Description | | ----------------------- | ------- | ---------------------------------------- | | `data_security.enabled` | boolean | Flag to enable or disable Data Security. | {% /collapsible-section %} ## Enable Payloads (`enable_payloads`){% #enable-payloads-enable_payloads %} {% collapsible-section %} Show 4 fields | Field | Type | Description | | -------------------------------- | ------- | -------------------------------------------------- | | `enable_payloads.events` | boolean | Flag to enable or disable events payloads. | | `enable_payloads.series` | boolean | Flag to enable or disable series payloads. | | `enable_payloads.service_checks` | boolean | Flag to enable or disable service checks payloads. | | `enable_payloads.sketches` | boolean | Flag to enable or disable sketches payloads. | {% /collapsible-section %} ## HA Agent (`ha_agent`){% #ha-agent-ha_agent %} {% collapsible-section %} Show 1 fields | Field | Type | Description | | ------------------ | ------- | ----------------------------------- | | `ha_agent.enabled` | boolean | Flag to enable or disable HA Agent. | {% /collapsible-section %} ## Logs (`logs_config`){% #logs-logs_config %} {% collapsible-section %} Show 19 fields | Field | Type | Description | | -------------------------------------------------- | ------------- | ---------------------------------------------------------------------------------------------------------------------------------------------- | | `logs_config.auto_multi_line_detection` | boolean | Flag to enable automatic detection and aggregation of multi-line logs. | | `logs_config.batch_max_size` | number | Maximum number of log events per HTTP batch.**Valid values**: 1–10000 | | `logs_config.compression_level` | number | Compression level (0-9) when use_compression is enabled.**Valid values**: 0–9 | | `logs_config.connection_reset_interval` | integer | Interval in seconds after which the logs forwarder connection to Datadog is reset. 0 disables the reset.**Valid values**: ≥ 0 | | `logs_config.container_collect_all` | boolean | Enable container log collection for all the containers (see ac_exclude to filter out containers) | | `logs_config.enable_recursive_glob` | boolean | Opt-in recursive glob for file log paths (supports **). Default false to preserve current behavior. | | `logs_config.file_wildcard_selection_mode` | string | Strategy for prioritizing wildcard file matches when they exceed open file limit.**Valid values**: `by_name`, `by_modification_time` | | `logs_config.force_use_http` | boolean | Flag to always send logs via HTTP(S) protocol and never fall back to TCP. | | `logs_config.frame_size` | number | Maximum size in bytes for log frames.**Valid values**: 1024–2097152 | | `logs_config.logs_dd_url` | string | The host of the Datadog logs intake server to send logs to. Restricted to datadoghq.com subdomains, for DNS-failover (DDR) setups. | | `logs_config.open_files_limit` | number | Maximum number of log files that can be tailed simultaneously.**Valid values**: 0–1000000 | | `logs_config.processing_rules` | array[object] | List of global processing rules applied to all logs. | | `logs_config.processing_rules.name` | string | Descriptive name for the processing rule. | | `logs_config.processing_rules.pattern` | string | Regex pattern to match against log content. | | `logs_config.processing_rules.replace_placeholder` | string | Placeholder text to replace matched sequences. | | `logs_config.processing_rules.type` | string | Type of processing rule to apply.**Valid values**: `exclude_at_match`, `include_at_match`, `mask_sequences`, `multi_line`, `exclude_truncated` | | `logs_config.use_compression` | boolean | Flag to enable compression when sending logs via HTTP. | | `logs_config.use_http` | boolean | Flag to use HTTP transport for sending logs. | | `logs_config.use_sourcehost_tag` | boolean | If true, then a source_host tag (IP Address) will be added to TCP/UDP logs. | {% /collapsible-section %} ## Network Devices (`network_devices`){% #network-devices-network_devices %} {% collapsible-section %} Show 26 fields | Field | Type | Description | | ----------------------------------------------------------------- | ------------- | ----------------------------------------------------------------------------------------------------------------------------------------------- | | `network_devices.autodiscovery.configs` | array[object] | List of discovery configurations for different subnets. | | `network_devices.autodiscovery.configs.authKey` | string | Secret identifier of a auth key | | `network_devices.autodiscovery.configs.authProtocol` | string | Authentication protocol for SNMP v3.**Valid values**: `MD5`, `SHA`, `SHA224`, `SHA256`, `SHA384`, `SHA512` | | `network_devices.autodiscovery.configs.community_string` | string | Secret identifier of a community string | | `network_devices.autodiscovery.configs.ignored_ip_addresses` | array[string] | List of IP addresses to ignore during discovery. | | `network_devices.autodiscovery.configs.loader` | string | Check loader to use for this network configuration. | | `network_devices.autodiscovery.configs.network_address` | string | CIDR network address to scan for SNMP devices. | | `network_devices.autodiscovery.configs.ping.count` | number | Number of ping packets to send per check.**Valid values**: 1–10 | | `network_devices.autodiscovery.configs.ping.enabled` | boolean | Flag to enable ICMP ping monitoring. | | `network_devices.autodiscovery.configs.ping.linux.use_raw_socket` | boolean | Flag to use raw sockets for privileged ping. | | `network_devices.autodiscovery.configs.ping.timeout` | number | Timeout in milliseconds for ping requests.**Valid values**: 100–30000 | | `network_devices.autodiscovery.configs.port` | number | UDP port for SNMP communications.**Valid values**: 1–65535 | | `network_devices.autodiscovery.configs.privKey` | string | Secret identifier of a privacy key | | `network_devices.autodiscovery.configs.privProtocol` | string | Privacy protocol for SNMP v3 encryption.**Valid values**: `DES`, `AES`, `AES192`, `AES192C`, `AES256`, `AES256C` | | `network_devices.autodiscovery.configs.snmp_version` | integer | SNMP protocol version to use.**Valid values**: `2`, `3` | | `network_devices.autodiscovery.configs.tags` | array[string] | List of tags to attach to discovered devices. | | `network_devices.autodiscovery.configs.user` | string | SNMP v3 username for authentication. | | `network_devices.autodiscovery.discovery_interval` | number | Interval in seconds between discovery runs.**Valid values**: 5–604800 | | `network_devices.autodiscovery.loader` | string | Check loader to use (core or python). | | `network_devices.autodiscovery.use_deduplication` | boolean | Deduplicate IP addresses corresponding to the same device. The deduplication logic is based on the sysName, sysDesc, sysObjectID and sysUptime. | | `network_devices.autodiscovery.use_device_id_as_hostname` | boolean | Flag to use device ID as hostname for metrics. | | `network_devices.autodiscovery.workers` | number | Number of concurrent workers for device discovery.**Valid values**: 1–5000 | | `network_devices.netflow.enabled` | boolean | Flag to enable NetFlow data collection. | | `network_devices.netflow.listeners` | array[object] | List of flow listeners for different protocols. | | `network_devices.netflow.listeners.flow_type` | string | Type of flow protocol to listen for.**Valid values**: `netflow5`, `netflow9`, `ipfix`, `sflow5` | | `network_devices.netflow.listeners.port` | number | UDP port to listen on for flow data.**Valid values**: 1–65535 | {% /collapsible-section %} ## Network Path (`network_path`){% #network-path-network_path %} {% collapsible-section %} Show 13 fields | Field | Type | Description | | ------------------------------------------------------ | ------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------- | | `network_path.collector.e2e_queries` | number | Number of end-to-end queries for static path tests. | | `network_path.collector.filters` | array[object] | List of inclusion/exclusion filters for network path collection. Filters are applied sequentially, with later filters taking precedence over earlier ones. | | `network_path.collector.filters.match_domain` | string | Domain pattern to match against. | | `network_path.collector.filters.match_domain_strategy` | string | Strategy for domain matching. Defaults to wildcard.**Valid values**: `wildcard`, `regex` | | `network_path.collector.filters.match_ip` | string | IP address or CIDR range to match against. | | `network_path.collector.filters.type` | string | Filter action type.**Valid values**: `include`, `exclude` | | `network_path.collector.max_ttl` | number | Maximum TTL (Time To Live) for traceroute tests. | | `network_path.collector.pathtest_interval` | string | Traceroute run interval for monitored connections. | | `network_path.collector.pathtest_ttl` | string | Duration a connection will be monitored when not seen. Resets when the connection appears again. | | `network_path.collector.timeout` | number | Timeout in milliseconds for a network path test. | | `network_path.collector.traceroute_queries` | number | Number of traceroute queries for static path tests. | | `network_path.collector.workers` | integer | Number of workers that can collect paths in parallel. | | `network_path.connections_monitoring.enabled` | boolean | Flag to enable or disable network path collection. | {% /collapsible-section %} ## Observability Pipelines Worker (`observability_pipelines_worker`){% #observability-pipelines-worker-observability_pipelines_worker %} {% collapsible-section %} Show 6 fields | Field | Type | Description | | ---------------------------------------------------------- | ------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | `observability_pipelines_worker.logs.dual_ship` | boolean | When false (default), the Observability Pipelines Worker replaces the primary Datadog logs intake as the sole destination. When true, logs are sent to BOTH the primary Datadog intake and the Observability Pipelines Worker. | | `observability_pipelines_worker.logs.dual_ship_reliable` | boolean | Only meaningful when dual_ship is true. When false (default), the Observability Pipelines Worker destination is best-effort and its failures do not apply backpressure to the main pipeline. When true, its failures participate in flow control like the primary Datadog endpoint. | | `observability_pipelines_worker.logs.enabled` | boolean | Flag to enable forwarding of logs to an Observability Pipelines Worker. | | `observability_pipelines_worker.metrics.enabled` | boolean | Flag to enable forwarding of metrics to an Observability Pipelines Worker. | | `observability_pipelines_worker.metrics.use_v3_api.series` | boolean | Flag to use the v3 API for the metrics series payload. | | `observability_pipelines_worker.traces.enabled` | boolean | Flag to enable forwarding of traces to an Observability Pipelines Worker. | {% /collapsible-section %} ## Private Action Runner (`private_action_runner`){% #private-action-runner-private_action_runner %} {% collapsible-section %} Show 1 fields | Field | Type | Description | | ------------------------------- | ------- | ---------------------------------------------------- | | `private_action_runner.enabled` | boolean | Flag to enable or disable the Private Action Runner. | {% /collapsible-section %} ## Process Monitoring (`process_config`){% #process-monitoring-process_config %} {% collapsible-section %} Show 8 fields | Field | Type | Description | | --------------------------------------------- | ------------- | --------------------------------------------------------------------------------------------------------------------------------- | | `process_config.blacklist_patterns` | array[string] | List of regex patterns to exclude processes from monitoring. | | `process_config.container_collection.enabled` | boolean | Flag to enable or disable container collection. | | `process_config.custom_sensitive_words` | array[string] | List of custom sensitive words to be scrubbed from process arguments. | | `process_config.enabled` | boolean | Flag to enable or disable process monitoring. Prefer using `process_collection.enabled` or `container_collection.enabled` instead | | `process_config.expvar_port` | number | Port for the go_expvar debug server.**Valid values**: 1–65535 | | `process_config.process_collection.enabled` | boolean | Flag to enable or disable process collection. | | `process_config.scrub_args` | boolean | Flag to enable scrubbing of sensitive process arguments. | | `process_config.strip_proc_arguments` | boolean | Flag to enable scrubbing of process arguments. | {% /collapsible-section %} ## Runtime Security (`runtime_security_config`){% #runtime-security-runtime_security_config %} {% collapsible-section %} Show 1 fields | Field | Type | Description | | --------------------------------- | ------- | ------------------------------------------- | | `runtime_security_config.enabled` | boolean | Flag to enable or disable runtime security. | {% /collapsible-section %} ## SBOM (`sbom`){% #sbom-sbom %} {% collapsible-section %} Show 3 fields | Field | Type | Description | | ------------------------------ | ------- | ------------------------------------------------------------- | | `sbom.container_image.enabled` | boolean | Flag to enable or disable container vulnerability management. | | `sbom.enabled` | boolean | Flag to enable or disable SBOM. | | `sbom.host.enabled` | boolean | Flag to enable or disable host vulnerability management. | {% /collapsible-section %} ## `shared_library_check`{% #shared_library_check %} {% collapsible-section %} Show 1 fields | Field | Type | Description | | ------------------------------ | ------- | ------------------------------------------------ | | `shared_library_check.enabled` | boolean | Flag to enable or disable shared library checks. | {% /collapsible-section %} ## Synthetics (`synthetics`){% #synthetics-synthetics %} {% collapsible-section %} Show 3 fields | Field | Type | Description | | ------------------------------------- | ------- | ------------------------------------------------------------------------------ | | `synthetics.collector.enabled` | boolean | Flag to enable or disable the Synthetics collector. | | `synthetics.collector.flush_interval` | string | How often the collector flushes data (e.g. '10s'). | | `synthetics.collector.workers` | integer | Number of worker goroutines for the Synthetics collector.**Valid values**: ≥ 1 | {% /collapsible-section %} ## Further reading{% #further-reading %} Additional helpful documentation, links, and articles: - [Fleet Automation](https://docs.datadoghq.com/agent/fleet_automation.md) - [Configure Agents](https://docs.datadoghq.com/agent/fleet_automation/configure_agents.md) - [Fleet Automation API](https://docs.datadoghq.com/api/latest/fleet-automation.md)