--- title: Azure Integrations description: Azure integrations breadcrumbs: Docs > Integrations > Integration Guides > Azure Integrations --- # Azure Integrations ## Overview{% #overview %} Datadog's Azure integration consists of an [app registration](https://learn.microsoft.com/security/zero-trust/develop/app-registration) with access to the subscriptions you want to monitor, and the app's credentials configured in Datadog. This allows you to forward your metrics, logs, configuration information, and cost data to Datadog for visibility and alerting. {% collapsible-section #required-permissions %} #### Permissions required for integration setup ### Azure permissions{% #azure-permissions %} Your Microsoft Entra ID user needs the following permissions: #### Permission to create an app registration{% #permission-to-create-an-app-registration %} **One** of the following must be true for the user: - `Users can register applications` has been set to `Yes` - The user has the [Application Developer](https://learn.microsoft.com/entra/identity/role-based-access-control/permissions-reference#application-developer) role #### Permission to assign roles within your subscriptions{% #permission-to-assign-roles-within-your-subscriptions %} You must have one of the [Azure built-in roles in the Privileged category](https://learn.microsoft.com/azure/role-based-access-control/built-in-roles/privileged), or a custom role including the `Microsoft.Authorization/roleAssignments/write` action, in each of the subscriptions you wish to connect. #### Permission to add and grant consent for Graph API permissions{% #permission-to-add-and-grant-consent-for-graph-api-permissions %} The [Privileged Role Administrator role](https://learn.microsoft.com/entra/identity/role-based-access-control/permissions-reference#privileged-role-administrator) contains the required permissions. ### Datadog permissions{% #datadog-permissions %} The `Datadog Admin Role`, or any other role with the `azure_configurations_manage` permission. {% /collapsible-section %} ## Azure service-specific integrations{% #azure-service-specific-integrations %} Setting up the main Azure integration also installs all of Datadog's Azure service-specific integrations. These integrations provide metrics, service checks, and events that give you visibility into the health and behavior of a particular Azure service. {% alert level="warning" %} Datadog's Azure integration is built to collect [all metrics from Azure Monitor](https://docs.microsoft.com/en-us/azure/azure-monitor/platform/metrics-supported). Datadog strives to continually update the docs to show every sub-integration, but cloud services rapidly release new metrics and services so the list of integrations can sometimes lag.The `azure.*.count` metric is generated by Datadog from Azure Resource Health. For more information, see [Count metric](https://docs.datadoghq.com/integrations/guide/azure-advanced-configuration/#count-metric) in the Azure Advanced Configuration guide. {% /alert %} {% collapsible-section #azure-integrations-list %} #### Highlighted integrations | Integration | Description | | ------------------------------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | [Analysis Services](https://docs.datadoghq.com/integrations/azure_analysis_services/) | A service that provides data models in the cloud. | | [API Management](https://docs.datadoghq.com/integrations/azure_api_management/) | A service to publish, secure, transform, maintain, and monitor APIs. | | [App Service](https://docs.datadoghq.com/integrations/azure_app_services/) | A service for deploying and scaling web, mobile, API and business logic application. | | [App Service Environment](https://docs.datadoghq.com/integrations/azure_app_service_environment/) | A service that provides an environment for securely running App Service apps at high scale. | | [App Service Plan](https://docs.datadoghq.com/integrations/azure_app_service_plan/) | A set of compute resources for a web app to run. | | [Application Gateway](https://docs.datadoghq.com/integrations/azure_application_gateway/) | A web traffic load balancer that enables you to manage traffic to your web applications. | | [Automation](https://docs.datadoghq.com/integrations/azure_automation/) | A service that provides automation and configuration management across your environments. | | [Batch Service](https://docs.datadoghq.com/integrations/azure_batch/) | Managed task scheduler and processor. | | [Cognitive Services](https://docs.datadoghq.com/integrations/azure_cognitive_services/) | APIs, SDKs, and services available to help build applications without AI or data science knowledge. | | [Container Instances](https://docs.datadoghq.com/integrations/azure_container_instances/) | A service to deploy containers without the need to provision or manage the underlying infrastructure. | | [Container Service](https://docs.datadoghq.com/integrations/azure_container_service/) | A production-ready Kubernetes, DC/OS, or Docker Swarm cluster. | | [Cosmos DB](https://docs.datadoghq.com/integrations/azure_cosmosdb/) | A database service that supports document, key-value, wide-column, and graph databases. | | [Customer Insights](https://docs.datadoghq.com/integrations/azure_customer_insights/) | Enables organizations to bring together datasets to build a 360° view of their customers. | | [Data Explorer](https://docs.datadoghq.com/integrations/azure_data_explorer/) | Fast and highly scalable data exploration service. | | [Data Factory](https://docs.datadoghq.com/integrations/azure_data_factory/) | A service to compose data storage, movement, and processing services into automated data pipelines. | | [Data Lake Analytics](https://docs.datadoghq.com/integrations/azure_data_lake_analytics/) | An analytics job service that simplifies big data. | | [Data Lake Store](https://docs.datadoghq.com/integrations/azure_data_lake_store/) | A no limits data lake that powers big data analytics. | | [Database for MariaDB](https://docs.datadoghq.com/integrations/azure_db_for_mariadb/) | A service that provides fully managed, enterprise-ready community MariaDB database. | | [Event Grid](https://docs.datadoghq.com/integrations/azure_event_grid/) | An event routing service that allows for uniform event consumption using a publish-subscribe model. | | [Event Hub](https://docs.datadoghq.com/integrations/azure_event_hub/) | Large scale data stream managed service. | | [ExpressRoute](https://docs.datadoghq.com/integrations/azure_express_route/) | A service to extend your on-premises networks into the cloud. | | [Firewall](https://docs.datadoghq.com/integrations/azure_firewall/) | Cloud-native network security to protect your Azure Virtual Network resources. | | [Functions](https://docs.datadoghq.com/integrations/azure_functions/) | A service for running serverless code in response to event triggers. | | [HDInsights](https://docs.datadoghq.com/integrations/azure_hd_insight/) | A cloud service that processes massive amounts of data. | | [IOT Hub](https://docs.datadoghq.com/integrations/azure_iot_hub/) | Connect, monitor, and manage billions of IOT assets. | | [Key Vault](https://docs.datadoghq.com/integrations/azure_key_vault/) | A service to safeguard and manage cryptographic keys and secrets used by cloud applications and services. | | [Load Balancer](https://docs.datadoghq.com/integrations/azure_load_balancer/) | Scale your applications and create high availability for your services. | | [Logic App](https://docs.datadoghq.com/integrations/azure_logic_app/) | Build powerful integration solutions. | | [Machine Learning](https://docs.datadoghq.com/integrations/azure_machine_learning_services/) | Enterprise-grade machine learning service to build and deploy models faster. | | [Network Interfaces](https://docs.datadoghq.com/integrations/azure_network_interface/) | Enables VM communication with internet, Azure, and on-premises resources. | | [Notification Hubs](https://docs.datadoghq.com/integrations/azure_notification_hubs/) | A push engine that allows you to send notifications to any platform from any backend. | | [Public IP Address](https://docs.datadoghq.com/integrations/azure_public_ip_address/) | A resource that enables inbound communication and outbound connectivity from the Internet. | | [Recovery Service Vault](https://docs.datadoghq.com/integrations/azure_recovery_service_vault/) | An entity that stores the backups and recovery points created over time. | | [Redis Cache](https://docs.datadoghq.com/integrations/azure_redis_cache/) | Managed data cache. | | [Relay](https://docs.datadoghq.com/integrations/azure_relay/) | Securely expose services that run in your corporate network to the public cloud. | | Storage | Storage for [blobs](https://docs.datadoghq.com/integrations/azure_blob_storage/), [files](https://docs.datadoghq.com/integrations/azure_file_storage/), [queues](https://docs.datadoghq.com/integrations/azure_queue_storage/), and [tables](https://docs.datadoghq.com/integrations/azure_table_storage/). | | [Stream Analytics](https://docs.datadoghq.com/integrations/azure_stream_analytics/) | An event-processing engine to examine high volumes of data streaming from devices. | | [SQL Database](https://docs.datadoghq.com/integrations/azure_sql_database/) | Highly scalable relational database in the cloud. | | [SQL Database Elastic Pool](https://docs.datadoghq.com/integrations/azure_sql_elastic_pool/) | Manage the performance of multiple database. | | [Synapse Analytics](https://docs.datadoghq.com/integrations/azure_synapse/) | An analytics service that brings together data integration, enterprise data warehousing and big data analytics. | | [Usage and Quotas](https://docs.datadoghq.com/integrations/azure_usage_and_quotas/) | Follow your Azure usage. | | [Virtual Machine](https://docs.datadoghq.com/integrations/azure_vm/) | Virtual machine management service. | | [Virtual Machine Scale Set](https://docs.datadoghq.com/integrations/azure_vm_scale_set/) | Deploy, manage, and autoscale a set of identical VMs. | | [Virtual Network](https://docs.datadoghq.com/integrations/azure-virtual-network/) | Allow Azure resources to securely communicate with each other, the internet, and on-premises networks. | {% /collapsible-section %} ## Datadog-generated metrics{% #datadog-generated-metrics %} Datadog automatically queries other resource-specific Azure metadata APIs and uses that information to generate additional timeseries metrics. There are more than 40 Datadog-generated metrics and dozens of new tags for your Azure services, including: - App Services - Azure Functions - App Service Plans - Azure SQL Databases - Azure Load Balancers - Azure Virtual Networks - Usage and quotas - Resource counts and statuses ## Configuration{% #configuration %} To limit metric collection for Azure-based hosts, open the integration tile for Azure. Select the **Configuration** tab, then open **App Registrations**. Enter a list of tags in the text box under **Metric Collection Filters**. This list of tags in `:` form is separated by commas and defines a filter used while collecting metrics. Wildcards such as `?` (for single characters) and `*` (for multiple characters) can also be used. Only VMs that match one of the defined tags are imported into Datadog. The rest are ignored. VMs matching a given tag can also be excluded by adding `!` before the tag. For example: ```text datadog:monitored,env:production,!env:staging,instance-type:c1.* ``` See the [Azure Advanced Configuration](https://docs.datadoghq.com/integrations/guide/azure-advanced-configuration/) guide for more configuration options. ## Data Collected{% #data-collected %} ### Metrics{% #metrics %} All standard Azure Monitor metrics plus [unique Datadog generated metrics](https://www.datadoghq.com/blog/datadog-generated-metrics-azure/). You can also enable collection of custom metrics from Azure Application Insights under the **Metric Collection** tab in the [Azure integration page](https://app.datadoghq.com/integrations/azure). For a detailed list of metrics, select the appropriate Azure service in the Azure service-specific integrations section. To exclude certain VMs from metric collection, see [Azure VM Exclusion](https://docs.datadoghq.com/account_management/billing/azure/#azure-vm-exclusion). ### Logs{% #logs %} See the [Azure automated log forwarding guide](https://docs.datadoghq.com/logs/guide/azure-automated-log-forwarding) to set up log forwarding from your Azure environment. ### Events{% #events %} The Azure integration automatically collects Azure Service Health events. To view these in Datadog, navigate to the [Event explorer](https://app.datadoghq.com/event/explorer) and filter for the `Azure Service Health` namespace. ### Service Checks{% #service-checks %} The Azure integration does not include any service checks. ### Tags{% #tags %} Azure integration metrics, events, and service checks receive the following tags in addition to tags defined in your Azure environments: | Integration | Namespace | Datadog Tag Keys | | --------------------------------------- | ------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | All Azure integrations | All | `cloud_provider`, `region`, `kind`, `type`, `name`, `resource_group`, `tenant_name`, `subscription_name`, `subscription_id`, `status` (if applicable) | | Azure VM integrations | `azure.vm.*` | `host`, `size`, `operating_system`, `availability_zone` | | Azure App Service Plans | `azure.web_serverfarms.*` | `per_site_scaling`, `plan_size`, `plan_tier`, `operating_system` | | Azure App Services Web Apps & Functions | `azure.app_services.*`, `azure.functions.*` | `operating_system`, `server_farm_id`, `reserved`, `usage_state`, `fx_version` (linux web apps only), `php_version`, `dot_net_framework_version`, `java_version`, `node_version`, `python_version` | | Azure SQL DB | `azure.sql_servers_databases.*` | `license_type`, `max_size_mb`, `server_name`, `role`, `zone_redundant`.For replication Links only: `state` `primary_server_name` `primary_server_region` `secondary_server_name` `secondary_server_region` | | Azure Load Balancer | `azure.network_loadbalancers.*` | `sku_name` | | Azure Usage and Quota | `azure.usage.*` | `usage_category`, `usage_name` | **Note**: See the [Azure integration billing page](https://docs.datadoghq.com/account_management/billing/azure/) for information about billing. ## Next steps{% #next-steps %} - See [Getting Started with Azure](https://docs.datadoghq.com/getting_started/integrations/azure/) to set up the integration - See [Azure Advanced Configuration](https://docs.datadoghq.com/integrations/guide/azure-advanced-configuration/) for detailed information about the architecture - See [Azure Automated Log Forwarding](https://docs.datadoghq.com/logs/guide/azure-automated-log-forwarding/) to automate the setup of log forwarding in your Azure environment. This log forwarding setup can also be configured through the [Azure Quickstart][] integration setup method. - [Visualize activity in your Azure environment with Datadog Cloud SIEM Investigator](https://www.datadoghq.com/blog/azure-investigator/) - [Quickly remediate issues in your Azure applications with Datadog Workflow Automation](https://www.datadoghq.com/blog/azure-workflow-automation/)