On This Page

Home / Search/ Get Your Data In/ Add Sources/Add a Datadog Agent Source for Cribl Search

Add a Datadog Agent Source for Cribl Search

Collect metrics, traces, and logs sent by the Datadog Agent so you can search them fast with Cribl Search.


What’s a Datadog Agent Source in Cribl Search?

A Cribl Search data source that receives logs, metrics, traces, and service checks from the Datadog Agent over HTTP or HTTPS and stores them in a lakehouse engine for fast access.

Looking for the Datadog Agent Source in Cribl Stream? See Datadog Agent Source in Cribl Stream.

What You Need First

To set up this Source, you need:

You don’t need Cribl Stream, Edge, or Lake.

Add a Datadog Agent Source for Cribl Search

On the Cribl.Cloud top bar, select Products > Search > Data > Add Source > Datadog Agent.

1. Describe Your Source

Under General, give your Source an ID and Description, so you and other Search Admins know what the Source is for and if it’s safe to modify.

The ID must be unique across your Workspace and can contain letters, numbers, underscores, and hyphens. Cribl Search prefixes it with in_ on save (for example, datadog_agent becomes in_datadog_agent).

2. Note the Source Endpoint

Under General, note down the Address and Port. You’ll need them to configure your Datadog Agent to send data here.

Keep the default port unless it conflicts with another service.

3. Set Up Encryption

TLS encryption protects your data in transit between upstream Datadog Agents and this Source.

Under Encrypt, select Enabled, and set the Minimum TLS version you want to accept.

TLS versionWhen to use
1.3Recommended. Provides the best security.
1.2Use only when connecting to older systems that don’t support TLS 1.3.
Older than 1.2Avoid if possible. These versions are no longer considered secure.

Next Steps

Confirm with Save. Now, you’re ready to:

  • Set Datatype rules for parsing your data. See Shape Your Data.
  • Set Dataset rules for organizing your data. See Organize Your Data.
  • Configure your Datadog Agent to send data to the Source endpoint.