---
title: Microsoft Entra Domain Services
description: >-
  Monitor Microsoft Entra Domain Services LDAP, DNS, and domain controller
  resource use.
breadcrumbs: Docs > Integrations > Microsoft Entra Domain Services
---

> For the complete documentation index, see [llms.txt](https://docs.datadoghq.com/llms.txt).

# Microsoft Entra Domain Services
Integration version1.0.0
{% callout %}
# Important note for users on the following Datadog sites: us2.ddog-gov.com

{% alert level="info" %}
To find out if this integration is available in your organization, see your [Datadog Integrations](https://app.datadoghq.com/integrations) page or ask your organization administrator.

To initiate an exception request to enable this integration for your organization, email [support@ddog-gov.com](mailto:support@ddog-gov.com).
{% /alert %}

{% /callout %}

## Overview{% #overview %}

Microsoft Entra Domain Services provides managed Active Directory domain controllers in Azure. This integration collects LDAP search and bind rates, DNS query and response rates, and domain controller CPU and memory metrics.

## Setup{% #setup %}

### Installation{% #installation %}

If you haven't already, set up the [Microsoft Azure integration](https://docs.datadoghq.com/integrations/azure.md) first. There are no other installation steps.

## Data Collected{% #data-collected %}

### Metrics{% #metrics %}

|  |
|  |
| **azure.aad_domainservices.count**(gauge)                                                         | The count of Microsoft Entra Domain Services resources.                                                                                                                                                                                        |
| **azure.aad_domainservices.directory_services_ntds_ldap_searches_sec**(gauge)                | Average number of searches per second for the NTDS object. This metric is backed by performance counter data from the domain controller, and can be filtered or split by role instance.*Shown as operation*                                    |
| **azure.aad_domainservices.directory_services_ntds_ldap_successful_binds_sec**(gauge)       | Number of LDAP successful binds per second for the NTDS object. This metric is backed by performance counter data from the domain controller, and can be filtered or split by role instance.*Shown as operation*                               |
| **azure.aad_domainservices.dns_total_query_received_sec**(gauge)                              | Average number of queries received by the DNS server each second. This metric is backed by performance counter data from the domain controller, and can be filtered or split by role instance.*Shown as query*                                 |
| **azure.aad_domainservices.dns_total_response_sent_sec**(gauge)                               | Average number of responses sent by the DNS server each second. This metric is backed by performance counter data from the domain controller, and can be filtered or split by role instance.*Shown as response*                                |
| **azure.aad_domainservices.memory_committed_bytes_in_use**(gauge)                             | Committed bytes in use as a percentage of the commit limit.*Shown as percent*                                                                                                                                                                  |
| **azure.aad_domainservices.process_dns_processor_time**(gauge)                                 | Percentage of elapsed time that all DNS process threads used the processor to execute instructions.*Shown as percent*                                                                                                                          |
| **azure.aad_domainservices.process_lsass_processor_time**(gauge)                               | Percentage of elapsed time that all LSASS process threads used the processor to execute instructions.*Shown as percent*                                                                                                                        |
| **azure.aad_domainservices.processor_total_processor_time**(gauge)                             | Percentage of elapsed time that the processor spends to execute a non-idle thread.*Shown as percent*                                                                                                                                           |
| **azure.aad_domainservices.security_system_wide_statistics_kerberos_authentications**(gauge) | Number of times per second that clients use a ticket to authenticate to the domain controller. This metric is backed by performance counter data from the domain controller and can be filtered or split by role instance.*Shown as event*     |
| **azure.aad_domainservices.security_system_wide_statistics_ntlm_authentications**(gauge)     | Number of NTLM authentications processed per second for Active Directory on the domain controller. This metric is backed by performance counter data from the domain controller and can be filtered or split by role instance.*Shown as event* |

### Service Checks{% #service-checks %}

Microsoft Entra Domain Services does not include any service checks.

### Events{% #events %}

Microsoft Entra Domain Services does not include any events.

## Troubleshooting{% #troubleshooting %}

Need help? Contact [Datadog support](https://docs.datadoghq.com/help/).