- Essentials
- In The App
- Infrastructure
- Application Performance
- Log Management
- Security Platform
- UX Monitoring
- Administration
All Agent traffic is sent over SSL. The destination is dependent on the Datadog service and site. To see destinations based on your site, use the SITE
selector on the right.
trace.agent.
process.
ndm-intake.
orchestrator.
intake.profile.
rum.
session-replay.
intake.synthetics.
is the only endpoint to configure.intake.synthetics.
intake-v2.synthetics.
api.
dbm-metrics-intake.
dbquery-intake.
agent-intake.logs.datadoghq.com
agent-http-intake.logs.datadoghq.com
tcp-encrypted-intake.logs.datadoghq.com
lambda-tcp-encrypted-intake.logs.datadoghq.com
gcp-encrypted-intake.logs.datadoghq.com
http-encrypted-intake.logs.datadoghq.com
agent-intake.logs.datadoghq.eu
agent-http-intake.logs.datadoghq.eu
tcp-encrypted-intake.logs.datadoghq.eu
lambda-tcp-encrypted-intake.logs.datadoghq.eu
gcp-encrypted-intake.logs.datadoghq.eu
http-encrypted-intake.logs.datadoghq.eu
agent-http-intake.logs.us3.datadoghq.com
lambda-tcp-encrypted-intake.logs.us3.datadoghq.com
gcp-encrypted-intake.logs.us3.datadoghq.com
http-encrypted-intake.logs.us3.datadoghq.com
agent-http-intake.logs.us5.datadoghq.com
lambda-tcp-encrypted-intake.logs.us5.datadoghq.com
gcp-encrypted-intake.logs.us5.datadoghq.com
http-encrypted-intake.logs.us5.datadoghq.com
agent-http-intake.logs.ddog-gov.com
lambda-tcp-encrypted-intake.logs.ddog-gov.com
gcp-encrypted-intake.logs.ddog-gov.com
http-encrypted-intake.logs.ddog-gov.com
<VERSION>-app.agent.
7-31-0-app.agent.
. Therefore you must add *.agent.
to your inclusion list in your firewall(s).api.
app.
All of these domains are CNAME records pointing to a set of static IP addresses. These addresses can be found at https://ip-ranges.
.
The information is structured as JSON following this schema:
{
"version": 1, // <-- incremented every time this information is changed
"modified": "YYYY-MM-DD-HH-MM-SS", // <-- timestamp of the last modification
"agents": { // <-- the IPs used by the Agent to submit metrics to Datadog
"prefixes_ipv4": [ // <-- list of IPv4 CIDR blocks
"a.b.c.d/x",
...
],
"prefixes_ipv6": [ // <-- list of IPv6 CIDR blocks
...
]
},
"api": {...}, // <-- same for non-critical Agent functionality (querying information from API)
"apm": {...}, // <-- same structure as "agents" but IPs used for the APM Agent data
"logs": {...}, // <-- same for the logs Agent data
"process": {...}, // <-- same for the process Agent data
"orchestrator": {...}, // <-- same for the process Agent data
"synthetics": {...}, // <-- not used for Agent traffic (Datadog source IPs of bots for synthetic tests)
"synthetics-private-locations": {...}, // <-- not used for Agent traffic (Datadog intake IPs for synthetics private locations)
"webhooks": {...} // <-- not used for Agent traffic (Datadog source IPs delivering webhooks)
}
Each section has a dedicated endpoint, for example:
https://ip-ranges./logs.json
for the IPs used to receive logs data over TCP.https://ip-ranges./apm.json
for the IPs used to receive APM data.Add all of the ip-ranges
to your inclusion list. While only a subset are active at any given moment, there are variations over time within the entire set due to regular network operation and maintenance.
Open the following ports to benefit from all the Agent functionalities:
Used for Agent services communicating with each other locally within the host only.
dogstatsd_non_local_traffic
is set to true. This port is available on localhost: 127.0.0.1
, ::1
, fe80::1
.dogstatsd_non_local_traffic
is set to true. This port is available on localhost: 127.0.0.1
, ::1
, fe80::1
.For a detailed configuration guide on proxy setup, see Agent Proxy Configuration.
If the network becomes unavailable, the Agent stores the metrics in memory.
The maximum memory usage for storing the metrics is defined by the forwarder_retry_queue_payloads_max_size
configuration setting. When this limit is reached, the metrics are dropped.
Agent v7.27.0+ stores the metrics on disk when the memory limit is reached. Enable this capability by setting forwarder_storage_max_size_in_bytes
to a positive value indicating the maximum amount of storage space, in bytes, that the Agent can use to store the metrics on disk.
The metrics are stored in the folder defined by the forwarder_storage_path
setting, which is by default /opt/datadog-agent/run/transactions_to_retry
on Unix systems and C:\ProgramData\Datadog\run\transactions_to_retry
on Windows.
To avoid running out of storage space, the Agent stores the metrics on disk only if the total storage space used is less than 95 percent. This limit is defined by forwarder_storage_max_disk_ratio
setting.
Additional helpful documentation, links, and articles: