---
title: Microsoft DNS
description: Gain insights into Microsoft DNS Server audit events.
breadcrumbs: Docs > Integrations > Microsoft DNS
---

# Microsoft DNS
Supported OS Integration version1.2.0          Microsoft DNS - Overview 1Microsoft DNS - Overview 2Microsoft DNS - Overview 3Microsoft DNS - Overview 4Microsoft DNS - Overview 5Microsoft DNS - Overview 6
## Overview{% #overview %}

[Microsoft DNS](https://learn.microsoft.com/en-us/windows-server/networking/dns/dns-overview) is a Windows Server service that translates domain names into IP addresses, allowing computers to find and communicate with each other on a network. It supports features like Dynamic DNS (DDNS), zone transfers, conditional forwarding, DNSSEC for security, and scavenging to remove stale records.

This integration collects and enhances [DNS Server audit events](https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/dn800669%28v=ws.11%29#audit-events), providing detailed insights through out-of-the-box dashboards. It also includes ready-to-use Cloud SIEM detection rules for improved monitoring and security.

**Minimum Agent version:** 7.68.0

## Setup{% #setup %}

### Installation{% #installation %}

To install the Microsoft DNS integration, run the following Agent installation command and the steps below. For more information, see the [Integration Management](https://docs.datadoghq.com/agent/guide/integration-management.md?tab=windowspowershell#install) documentation.

**Note**: This step is not necessary for Agent version >= 7.66.0.

Run powershell.exe as admin and execute following command:

```powershell
& "$env:ProgramFiles\Datadog\Datadog Agent\bin\agent.exe" integration install datadog-microsoft_dns==1.0.0
```

### Configuration{% #configuration %}

#### Configure Log Collection{% #configure-log-collection %}

1. Collecting logs is disabled by default in the Datadog Agent. Enable it in the `datadog.yaml` file with:

   ```yaml
     logs_enabled: true
   ```

1. Add this configuration block to your `microsoft_dns.d/conf.yaml` file to start collecting your Microsoft DNS Server audit events:

   ```yaml
     logs:
     - type: windows_event
       channel_path: "Microsoft-Windows-DNSServer/Audit"
       source: microsoft-dns
       service: microsoft-dns
       sourcecategory: windowsevent
   ```

1. [Restart the Agent](https://docs.datadoghq.com/agent/configuration/agent-commands.md#restart-the-agent).

### Validation{% #validation %}

[Run the Agent's status subcommand](https://docs.datadoghq.com/agent/guide/agent-commands.md#agent-status-and-information) and look for `microsoft_dns` under the Checks section.

## Data Collected{% #data-collected %}

### Logs{% #logs %}

The Microsoft DNS integration collects the [DNS Server audit events](https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/dn800669%28v=ws.11%29#audit-events).

### Metrics{% #metrics %}

The Microsoft DNS integration does not include any metrics.

### Events{% #events %}

The Microsoft DNS integration does not include any events.

### Service Checks{% #service-checks %}

The Microsoft DNS integration does not include any service checks.

## Support{% #support %}

Need help? Contact [Datadog support](https://docs.datadoghq.com/help/).