Supported datadog.yaml Configuration Fields

This product is not supported for your selected Datadog site. ().

Fleet Automation supports a subset of datadog.yaml fields when you configure Agents. Every change you supply is validated against a schema, and any field not listed here is rejected with a schema validation error.

Expand a section below to see each supported field with its type, description, and valid values.

Top-level fields

FieldTypeDescription
check_runnersnumberNumber of concurrent check runners for executing integrations.
Valid values: 1–1000
cloud_provider_metadataarray[string]List of cloud providers to query for metadata (aws, gcp, azure, etc.).
cmd_portnumberPort for the Agent's internal command API.
Valid values: 1–65535
collect_ec2_tagsbooleanFlag to enable collection of AWS EC2 custom tags as host tags.
collect_ec2_tags_use_imdsbooleanFlag to use EC2 Instance Metadata Service instead of API for tag collection.
dd_urlstringThe host of the Datadog intake server to send Agent data to. Restricted to datadoghq.com subdomains, for DNS-failover (DDR) setups.
dogstatsd_non_local_trafficbooleanFlag to allow DogStatsD to accept non-local UDP traffic.
dogstatsd_origin_detectionbooleanWhen using Unix Socket, DogStatsD can tag metrics with container metadata. If running DogStatsD in a container, host PID mode (e.g. with --pid=host) is required. Only supported for socket traffic.
dogstatsd_portnumberPort number for the DogStatsD server to listen on.
Valid values: 1–65535
dogstatsd_socketstringUnix socket path for DogStatsD communication.
dogstatsd_stats_enablebooleanFlag to enable DogStatsD internal statistics collection.
dogstatsd_stats_portnumberPort for DogStatsD statistics go_expvar server.
Valid values: 1–65535
dogstatsd_tagsarrayList of tags to be applied to all DogStatsD metrics.
ec2_metadata_timeoutstringTimeout for calls to AWS EC2 metadata endpoints.
ecs_collect_resource_tags_ec2stringConfiguration for collecting ECS resource tags on EC2 launch type.
ecs_task_collection_enabledbooleanFlag to enable ECS task collection for the orchestrator check.
envstringThe environment name where the agent is running.
exclude_gce_tagsarray[string]List of GCE metadata attributes to exclude from host tags.
expvar_portnumberPort for the Agent's go_expvar debug server.
Valid values: 1–65535
extra_tagsarrayAdditional tags to be applied to all data sent by the Agent.
forwarder_connection_reset_intervalintegerInterval in seconds after which forwarder connections to Datadog are reset. 0 disables the reset.
Valid values: ≥ 0
histogram_aggregatesarray[string]List of histogram aggregations to compute for DogStatsD.
histogram_percentilesarray[string]List of percentiles to compute for DogStatsD histograms.
hostname_fqdnbooleanWhen the Agent relies on the OS to determine the hostname, make it use the FQDN instead of the short hostname.
infrastructure_modestringThe monitoring mode the agent is configured in, each mode offers different amount of feature (default is full, other potential values are end_user_device, basic, or cloud_cost_only).
Valid values: basic, full, end_user_device, cloud_cost_only, none
log_file_max_rollsnumberMaximum number of old log files to keep after rotation.
Valid values: 0–1000
log_file_max_sizestringMaximum size for Agent log files before rotation.
log_levelstringMinimum log level for the Datadog Agent.
Valid values: off, critical, error, warn, info, debug, trace
log_to_consolebooleanFlag to enable logging to standard output.
log_to_syslogbooleanFlag to enable logging to syslog.
logs_enabledbooleanFlag to enable or disable log collection.
max_events_per_secondnumberMaximum number of APM events to sample per second.
Valid values: 0–1000000000
min_tls_versionstringMinimum TLS version for connections to Datadog intake.
open_files_limitnumberMaximum number of files the Agent can keep open simultaneously.
Valid values: 0–1000000
tagsarrayList of tags to be applied to all data sent by the Agent.
use_diskv2_checkbooleanFlag to enable or disable the Go core disk check. When disabled, the Python disk check is used instead.
use_dogstatsdbooleanFlag to enable or disable the DogStatsD server.
use_networkv2_checkbooleanFlag to enable or disable the Go core network check. When disabled, the Python network check is used instead.

APM (apm_config)

FieldTypeDescription
apm_config.apm_dd_urlstringThe host of the Datadog trace intake server to send traces to. Restricted to datadoghq.com subdomains, for DNS-failover (DDR) setups.
apm_config.apm_non_local_trafficbooleanFlag to allow APM Agent to listen for non-local traffic.
apm_config.connection_reset_intervalintegerInterval in seconds after which the trace agent connection to Datadog is reset. 0 disables the reset.
Valid values: ≥ 0
apm_config.enabledbooleanFlag to enable or disable APM.
apm_config.envstringThe environment tag that Traces should be tagged with.
apm_config.extra_sample_ratenumberAdditional sampling rate multiplier for trace collection.
Valid values: 0–100
apm_config.filter_tags.rejectarray[string]List of tag patterns to reject traces.
apm_config.ignore_resourcesarray[string]List of regular expressions to exclude traces based on their resource name.
apm_config.max_traces_per_secondnumberMaximum number of traces to sample per second.
Valid values: 0–1000000000
apm_config.obfuscation.http.remove_paths_with_digitsbooleanFlag to obfuscate URL path segments containing digits.
apm_config.obfuscation.http.remove_query_stringbooleanFlag to remove query strings from HTTP URLs.
apm_config.obfuscation.remove_stack_tracesbooleanFlag to remove stack traces from span data.
apm_config.receiver_portnumberPort number for the trace receiver to listen on.
Valid values: 1–65535
apm_config.receiver_socketstringUnix Domain Socket path for receiving traces.

Compliance (compliance_config)

FieldTypeDescription
compliance_config.enabledbooleanFlag to enable or disable compliance checks.

Container Image (container_image)

FieldTypeDescription
container_image.enabledbooleanFlag to enable or disable container image scanning.

data_security

FieldTypeDescription
data_security.enabledbooleanFlag to enable or disable Data Security.

Enable Payloads (enable_payloads)

FieldTypeDescription
enable_payloads.eventsbooleanFlag to enable or disable events payloads.
enable_payloads.seriesbooleanFlag to enable or disable series payloads.
enable_payloads.service_checksbooleanFlag to enable or disable service checks payloads.
enable_payloads.sketchesbooleanFlag to enable or disable sketches payloads.

HA Agent (ha_agent)

FieldTypeDescription
ha_agent.enabledbooleanFlag to enable or disable HA Agent.

Logs (logs_config)

FieldTypeDescription
logs_config.auto_multi_line_detectionbooleanFlag to enable automatic detection and aggregation of multi-line logs.
logs_config.batch_max_sizenumberMaximum number of log events per HTTP batch.
Valid values: 1–10000
logs_config.compression_levelnumberCompression level (0-9) when use_compression is enabled.
Valid values: 0–9
logs_config.connection_reset_intervalintegerInterval in seconds after which the logs forwarder connection to Datadog is reset. 0 disables the reset.
Valid values: ≥ 0
logs_config.container_collect_allbooleanEnable container log collection for all the containers (see ac_exclude to filter out containers)
logs_config.enable_recursive_globbooleanOpt-in recursive glob for file log paths (supports **). Default false to preserve current behavior.
logs_config.file_wildcard_selection_modestringStrategy for prioritizing wildcard file matches when they exceed open file limit.
Valid values: by_name, by_modification_time
logs_config.force_use_httpbooleanFlag to always send logs via HTTP(S) protocol and never fall back to TCP.
logs_config.frame_sizenumberMaximum size in bytes for log frames.
Valid values: 1024–2097152
logs_config.logs_dd_urlstringThe host of the Datadog logs intake server to send logs to. Restricted to datadoghq.com subdomains, for DNS-failover (DDR) setups.
logs_config.open_files_limitnumberMaximum number of log files that can be tailed simultaneously.
Valid values: 0–1000000
logs_config.processing_rulesarray[object]List of global processing rules applied to all logs.
logs_config.processing_rules.namestringDescriptive name for the processing rule.
logs_config.processing_rules.patternstringRegex pattern to match against log content.
logs_config.processing_rules.replace_placeholderstringPlaceholder text to replace matched sequences.
logs_config.processing_rules.typestringType of processing rule to apply.
Valid values: exclude_at_match, include_at_match, mask_sequences, multi_line, exclude_truncated
logs_config.use_compressionbooleanFlag to enable compression when sending logs via HTTP.
logs_config.use_httpbooleanFlag to use HTTP transport for sending logs.
logs_config.use_sourcehost_tagbooleanIf true, then a source_host tag (IP Address) will be added to TCP/UDP logs.

Network Devices (network_devices)

FieldTypeDescription
network_devices.autodiscovery.configsarray[object]List of discovery configurations for different subnets.
network_devices.autodiscovery.configs.authKeystringSecret identifier of a auth key
network_devices.autodiscovery.configs.authProtocolstringAuthentication protocol for SNMP v3.
Valid values: MD5, SHA, SHA224, SHA256, SHA384, SHA512
network_devices.autodiscovery.configs.community_stringstringSecret identifier of a community string
network_devices.autodiscovery.configs.ignored_ip_addressesarray[string]List of IP addresses to ignore during discovery.
network_devices.autodiscovery.configs.loaderstringCheck loader to use for this network configuration.
network_devices.autodiscovery.configs.network_addressstringCIDR network address to scan for SNMP devices.
network_devices.autodiscovery.configs.ping.countnumberNumber of ping packets to send per check.
Valid values: 1–10
network_devices.autodiscovery.configs.ping.enabledbooleanFlag to enable ICMP ping monitoring.
network_devices.autodiscovery.configs.ping.linux.use_raw_socketbooleanFlag to use raw sockets for privileged ping.
network_devices.autodiscovery.configs.ping.timeoutnumberTimeout in milliseconds for ping requests.
Valid values: 100–30000
network_devices.autodiscovery.configs.portnumberUDP port for SNMP communications.
Valid values: 1–65535
network_devices.autodiscovery.configs.privKeystringSecret identifier of a privacy key
network_devices.autodiscovery.configs.privProtocolstringPrivacy protocol for SNMP v3 encryption.
Valid values: DES, AES, AES192, AES192C, AES256, AES256C
network_devices.autodiscovery.configs.snmp_versionintegerSNMP protocol version to use.
Valid values: 2, 3
network_devices.autodiscovery.configs.tagsarray[string]List of tags to attach to discovered devices.
network_devices.autodiscovery.configs.userstringSNMP v3 username for authentication.
network_devices.autodiscovery.discovery_intervalnumberInterval in seconds between discovery runs.
Valid values: 5–604800
network_devices.autodiscovery.loaderstringCheck loader to use (core or python).
network_devices.autodiscovery.use_deduplicationbooleanDeduplicate IP addresses corresponding to the same device. The deduplication logic is based on the sysName, sysDesc, sysObjectID and sysUptime.
network_devices.autodiscovery.use_device_id_as_hostnamebooleanFlag to use device ID as hostname for metrics.
network_devices.autodiscovery.workersnumberNumber of concurrent workers for device discovery.
Valid values: 1–5000
network_devices.netflow.enabledbooleanFlag to enable NetFlow data collection.
network_devices.netflow.listenersarray[object]List of flow listeners for different protocols.
network_devices.netflow.listeners.flow_typestringType of flow protocol to listen for.
Valid values: netflow5, netflow9, ipfix, sflow5
network_devices.netflow.listeners.portnumberUDP port to listen on for flow data.
Valid values: 1–65535

Network Path (network_path)

FieldTypeDescription
network_path.collector.e2e_queriesnumberNumber of end-to-end queries for static path tests.
network_path.collector.filtersarray[object]List of inclusion/exclusion filters for network path collection. Filters are applied sequentially, with later filters taking precedence over earlier ones.
network_path.collector.filters.match_domainstringDomain pattern to match against.
network_path.collector.filters.match_domain_strategystringStrategy for domain matching. Defaults to wildcard.
Valid values: wildcard, regex
network_path.collector.filters.match_ipstringIP address or CIDR range to match against.
network_path.collector.filters.typestringFilter action type.
Valid values: include, exclude
network_path.collector.max_ttlnumberMaximum TTL (Time To Live) for traceroute tests.
network_path.collector.pathtest_intervalstringTraceroute run interval for monitored connections.
network_path.collector.pathtest_ttlstringDuration a connection will be monitored when not seen. Resets when the connection appears again.
network_path.collector.timeoutnumberTimeout in milliseconds for a network path test.
network_path.collector.traceroute_queriesnumberNumber of traceroute queries for static path tests.
network_path.collector.workersintegerNumber of workers that can collect paths in parallel.
network_path.connections_monitoring.enabledbooleanFlag to enable or disable network path collection.

Observability Pipelines Worker (observability_pipelines_worker)

FieldTypeDescription
observability_pipelines_worker.logs.dual_shipbooleanWhen false (default), the Observability Pipelines Worker replaces the primary Datadog logs intake as the sole destination. When true, logs are sent to BOTH the primary Datadog intake and the Observability Pipelines Worker.
observability_pipelines_worker.logs.dual_ship_reliablebooleanOnly meaningful when dual_ship is true. When false (default), the Observability Pipelines Worker destination is best-effort and its failures do not apply backpressure to the main pipeline. When true, its failures participate in flow control like the primary Datadog endpoint.
observability_pipelines_worker.logs.enabledbooleanFlag to enable forwarding of logs to an Observability Pipelines Worker.
observability_pipelines_worker.metrics.enabledbooleanFlag to enable forwarding of metrics to an Observability Pipelines Worker.
observability_pipelines_worker.metrics.use_v3_api.seriesbooleanFlag to use the v3 API for the metrics series payload.
observability_pipelines_worker.traces.enabledbooleanFlag to enable forwarding of traces to an Observability Pipelines Worker.

Private Action Runner (private_action_runner)

FieldTypeDescription
private_action_runner.enabledbooleanFlag to enable or disable the Private Action Runner.

Process Monitoring (process_config)

FieldTypeDescription
process_config.blacklist_patternsarray[string]List of regex patterns to exclude processes from monitoring.
process_config.container_collection.enabledbooleanFlag to enable or disable container collection.
process_config.custom_sensitive_wordsarray[string]List of custom sensitive words to be scrubbed from process arguments.
process_config.enabledbooleanFlag to enable or disable process monitoring. Prefer using `process_collection.enabled` or `container_collection.enabled` instead
process_config.expvar_portnumberPort for the go_expvar debug server.
Valid values: 1–65535
process_config.process_collection.enabledbooleanFlag to enable or disable process collection.
process_config.scrub_argsbooleanFlag to enable scrubbing of sensitive process arguments.
process_config.strip_proc_argumentsbooleanFlag to enable scrubbing of process arguments.

Runtime Security (runtime_security_config)

FieldTypeDescription
runtime_security_config.enabledbooleanFlag to enable or disable runtime security.

SBOM (sbom)

FieldTypeDescription
sbom.container_image.enabledbooleanFlag to enable or disable container vulnerability management.
sbom.enabledbooleanFlag to enable or disable SBOM.
sbom.host.enabledbooleanFlag to enable or disable host vulnerability management.

shared_library_check

FieldTypeDescription
shared_library_check.enabledbooleanFlag to enable or disable shared library checks.

Synthetics (synthetics)

FieldTypeDescription
synthetics.collector.enabledbooleanFlag to enable or disable the Synthetics collector.
synthetics.collector.flush_intervalstringHow often the collector flushes data (e.g. '10s').
synthetics.collector.workersintegerNumber of worker goroutines for the Synthetics collector.
Valid values: ≥ 1

Further reading

Additional helpful documentation, links, and articles:

Fleet AutomationDOCUMENTATION more more Configure AgentsDOCUMENTATION more more Fleet Automation APIDOCUMENTATION more more