Previous

Next

Microsoft DNS - Overview 1

Microsoft DNS - Overview 2

Microsoft DNS - Overview 3

Microsoft DNS - Overview 4

Overview

Microsoft DNS is a Windows Server service that translates domain names into IP addresses, allowing computers to find and communicate with each other on a network. It supports features like Dynamic DNS (DDNS), zone transfers, conditional forwarding, DNSSEC for security, and scavenging to remove stale records.

This integration collects and enhances DNS Server audit events, providing detailed insights through out-of-the-box dashboards. It also includes ready-to-use Cloud SIEM detection rules for improved monitoring and security.

Setup

Installation

To install the Microsoft DNS integration, run the following Agent installation command and the steps below. For more information, see the Integration Management documentation.

Note: This step is not necessary for Agent version >= 7.66.0.

Run powershell.exe as admin and execute following command:

& "$env:ProgramFiles\Datadog\Datadog Agent\bin\agent.exe" integration install datadog-microsoft_dns==1.0.0

Configuration

Configure Log Collection

1. Collecting logs is disabled by default in the Datadog Agent. Enable it in the datadog.yaml file with:

     logs_enabled: true
   

2. Add this configuration block to your microsoft_dns.d/conf.yaml file to start collecting your Microsoft DNS Server audit events:

     logs:
     - type: windows_event
       channel_path: "Microsoft-Windows-DNSServer/Audit"
       source: microsoft-dns
       service: microsoft-dns
       sourcecategory: windowsevent
   

3. Restart the Agent.

Validation

Run the Agent’s status subcommand and look for microsoft_dns under the Checks section.

Data Collected

Logs

The Microsoft DNS integration collects the DNS Server audit events.

Metrics

The Microsoft DNS integration does not include any metrics.

Events

The Microsoft DNS integration does not include any events.

Service Checks

The Microsoft DNS integration does not include any service checks.

Support

Need help? Contact Datadog support.