Edit

Manage your Datadog resource

This article covers day-to-day management tasks for your Datadog Azure Native Integration resource. It includes configuring metrics and logs, managing agents, setting up multi-subscription monitoring, and more.

Resource overview

To open your Datadog resource:

  1. Sign in to the Azure portal.
  2. Open the Datadog resources browse view (or search for Datadog in the global search bar and select Datadog – An Azure Native ISV Service).
  3. Select your Datadog resource. The Azure portal opens the Overview pane by default.

A screenshot of a Datadog resource in the Azure portal with the overview displayed in the working pane.

The overview pane shows these details:

Detail Description
Resource group name The resource group containing this Datadog resource
Location The Azure region where the resource is deployed
Subscription / Subscription ID The Azure subscription linked to this resource
Tags Azure resource tags applied to this resource
Datadog organization The Datadog organization linked to this resource
Status Active, Creating, or Failed
Pricing Plan The current Datadog billing plan
Billing Term Monthly or annual billing term

Below the essentials, you can navigate to:

  • View Dashboards — Insights on health and performance in the Datadog portal
  • View Logs — Search and analyze logs with ad-hoc queries in the Datadog portal
  • View host maps — A complete view of all monitored hosts (Azure Virtual Machines, Azure Virtual Machine Scale Sets, Azure App Service plans)

The working pane also shows a summary of monitored resources:

Column Description
Resource type Azure resource type
Total resources Count of all resources for the resource type
Resources sending logs Count of resources sending logs to Datadog through the integration
Resources sending metrics Count of resources sending metrics to Datadog through the integration

Reconfigure rules for metrics and logs

To change which resources send metrics and logs to Datadog:

  1. Select Datadog organization configurations > Metrics and Logs from the service menu.
  2. Update the tag rules or toggle individual settings. See tag rules for sending metrics and tag rules for sending logs for include/exclude examples.
  3. Changes take effect within a few minutes as diagnostic settings are updated on matching resources.

For a full reference on what data is forwarded and how tag rules behave, see Monitor & Observe Azure resources with Azure Native Integrations.

Resource collection and Cloud Security Posture Management

The Resource collection blade (under Datadog organization configurations) controls two features:

Setting Default What it does
Enable resource collection On Datadog collects metadata (types, tags, configurations) for every Azure resource in the linked subscription and populates the Datadog Resource Catalog. There's no additional Datadog charge.
Enable Datadog Cloud Security Posture Management Off Continuously assesses your Azure configuration against CIS, PCI DSS, SOC 2, HIPAA, and other benchmarks. Learn more about Cloud Security Posture Management.

To change these settings:

  1. Open your Datadog resource and select Datadog organization configurations > Resource collection from the service menu.
  2. Toggle Enable resource collection and/or Enable Datadog Cloud Security Posture Management.
  3. Select Save from the command bar.

Important

Cloud Security Posture Management can be enabled only when Enable resource collection is on. If you clear Enable resource collection, the CSPM checkbox is automatically disabled and any active CSPM scanning stops for the subscription.

View monitored resources

To view the list of resources emitting logs to Datadog, select Datadog organization configurations > Monitored Resources in the service menu.

Tip

You can filter the list of resources by resource type, subscription, resource group name, location, and whether the resource is sending logs and metrics.

The column Logs to Datadog indicates whether the resource is sending logs to Datadog. If a resource you expect to see isn't sending data, check:

  • The resource type supports Azure Monitor diagnostic logs. See supported categories.
  • Your tag rules include (not exclude) the resource.
  • The resource hasn't reached the limit of five diagnostic settings.

Monitor multiple subscriptions

A single Datadog resource can monitor Azure resources across multiple subscriptions. This capability is useful when you have separate subscriptions for dev, staging, and production but want unified monitoring.

When you add or remove subscriptions for Datadog monitoring, the system updates the Monitoring Reader role assignment on the System Managed Identity linked to the resource.

Prerequisites

  • To perform these actions, you must have both of the following Azure permissions:

    • Microsoft.Authorization/roleAssignments/write
    • Microsoft.Authorization/roleAssignments/delete

  • The resource provider for Datadog (Microsoft.Datadog) must be registered in the target subscription. See Verify resource provider registration.

Add subscriptions

To monitor multiple subscriptions:

  1. Select Datadog organization configurations > Monitored Subscriptions.

  2. Select Add subscriptions from the Command bar.

    The Add Subscriptions experience that opens and shows subscriptions you have Owner role assigned to and any Datadog resource created in those subscriptions that is already linked to the same Datadog organization as the current resource.

    If the subscription you want to monitor has a resource already linked to the same Datadog org, delete the Datadog resources to avoid shipping duplicate data and incurring double the charges.

  3. Select the subscriptions you want to monitor through the Datadog resource and select Add.

    Important

    • When you link a subscription to a Datadog resource, ensure that the subscription isn't scope locked (read-only or delete locks). Scope locks can prevent the addition and removal of diagnostic settings. For more information, see Lock your Azure resources.
    • Setting separate tag rules for different subscriptions isn't supported. The tag rules from the primary resource apply to all monitored subscriptions.

    Diagnostics settings are automatically added to the subscription's resources that match the defined tag rules.

    Select Refresh to view the subscriptions and their monitoring status.

Once the subscription is added, the status changes to Active.

Remove subscriptions

Important

When you unlink a subscription from a Datadog resource, ensure that the subscription isn't scope locked (read-only or delete locks). Scope locks can prevent the addition and removal of diagnostic settings. For more information, see Lock your Azure resources.

To unlink subscriptions from a Datadog resource:

  1. Select Datadog organization configurations > Monitored Subscriptions from the service menu.

  2. Select the subscription you want to remove.

  3. Choose Remove subscriptions.

To view the updated list of monitored subscriptions, select Refresh from the Command bar.

API keys

To view and manage API keys for your Datadog resource:

  1. Select Settings > Keys from the service menu.

    The Azure portal provides a read-only view of the API keys.

  2. To create or manage keys, select the Datadog portal link.

    The Datadog portal opens in a new tab.

After making changes in the Datadog portal, refresh the Azure portal view.

Important

One API key must be set as the Default Key. This key is used when deploying Datadog agents to VMs and App Services. If no default key is set, agent installations fail.

Monitor resources with Datadog agents

You can install Datadog agents on virtual machines, App Service extensions, Azure Kubernetes Services, and Azure Arc Machines.

Important

If a default key isn't selected, your Datadog agent installation fails. See API keys.

The agent collects detailed host-level metrics, traces, and logs that aren't available through Azure platform metrics alone. This includes process-level data, custom application metrics, and APM traces.

Select Datadog organization configurations > Virtual machine agent from the service menu to see every running VM in the linked subscription. The pane shows the VM name, power state, current Datadog Agent version, Agent status (Running/Stopped/Not installed), install method, and whether the Agent is forwarding logs.

To install the Datadog Agent as a VM extension:

  1. Make sure a default API key is set. Installation fails without it.
  2. Select the target VM (must be in Running state).
  3. Select Install Extension and confirm. Azure installs the Datadog Agent as a VM extension using the default API key, and the status changes from Installing to Installed. The Datadog Agent doesn't require a host reboot.

To uninstall, select the VM and choose Uninstall Extension. If the Agent was installed by another method (Chef, Ansible, manual install, etc.), this pane shows status but the Azure-managed uninstall option is disabled.

Reconfigure single sign-on

To enable single sign-on through Microsoft Entra ID:

  1. Select Settings > Single sign-on from the Resource pane.

  2. Select the check box.

Change your billing plan

To change the Datadog billing plan associated with your resource:

  1. On the Overview pane of your Datadog resource, select Change Plan from the command bar.

    Azure retrieves all Datadog plans available to your tenant, including any private offers you've accepted.

  2. Select the new plan and choose Change Plan.

Usage on Marketplace-billed Datadog plans counts toward your organization's Microsoft Azure Consumption Commitment (MACC), where applicable.

Manage logs and metrics

To stop sending logs and metrics from Azure to Datadog:

  1. Open your Datadog resource from the Datadog resources browse view.
  2. Select Disable from the command bar.

Important

Disabling the integration stops the flow of Azure platform metrics and logs to Datadog. However, billing continues for other Datadog services that aren't related to monitoring Azure metrics and logs (such as APM, infrastructure agents, or log indexing in Datadog).

Delete a resource

To delete a resource:

  1. On the command bar, select Delete.

  2. On the Delete Resource pane, optionally select a reason for deleting the resource.

  3. In the Enter resource name to confirm deletion box, enter the name of the resource.

  4. Select Delete.

  5. Select Delete again to confirm deletion.

After the resource is deleted, all billing for that resource through Azure Marketplace stops.

Note

Deleting the Datadog resource in Azure stops Azure data forwarding and billing through Azure Marketplace. It doesn't delete your Datadog organization or any data stored in Datadog.

Get support

Contact Datadog for customer support.

You can also request support in the Azure portal from the resource overview.

Select Support + Troubleshooting > New support request from the service menu, then choose the link to log a support request in the Datadog portal.

Related content

  • Last updated on