To send Datadog Agent logs to the Observability Pipelines Worker, update your Agent configuration file with the following:
observability_pipelines_worker:
logs:
enabled: true
url: "http://<OPW_HOST>:8282"
<OPW_HOST> is the host IP address or the load balancer URL associated with the Observability Pipelines Worker.
For CloudFormation installs, use the LoadBalancerDNS CloudFormation output for the URL.
For Kubernetes installs, you can use the internal DNS record of the Observability Pipelines Worker service. For example: http://opw-observability-pipelines-worker.default.svc.cluster.local:<PORT>.
Optionally, to ensure host tags are included in your logs, add the following to your Agent configuration file:
logs_config:
expected_tags_duration: "1000000m"
expected_tags_duration ensures the Agent attaches host-level tags (such as EC2 instance tags) directly to each log event sent to Observability Pipelines. Without this setting, these tags are applied at the Datadog intake level and are not present in the log payload when it passes through Observability Pipelines. Setting the duration to 1000000m (approximately 1.5 years) covers the standard lifecycle of a node. Note that tags may increase the size of your log.
After you restart the Agent, your observability data should be going to the Worker, processed by the pipeline, and delivered to Datadog.