core_schema.yaml

$schema: https://json-schema.org/draft/2020-12/schema
$id: https://raw.githubusercontent.com/DataDog/schema/main/agent/datadog.yaml.schema.json
title: DataDog Agent configuration schema
description: The schema to validate the datadog.yaml configuration for the DataDog
  Agent
properties:
  api_key:
    node_type: setting
    title: Basic Configuration
    type: string
    default: ''
    visibility: public
    description: |-
      The Datadog API key used by your Agent to submit metrics and events to Datadog.
      Create a new API key here: https://app.datadoghq.com/organization-settings/api-keys .
      Read more about API keys here: https://docs.datadoghq.com/account_management/api-app-keys/#api-keys .
    tags:
    - template_section:Common
  app_key:
    node_type: setting
    type: string
    default: ''
    visibility: public
    description: |-
      The application key used to access Datadog's programmatic API.
      Create a new application key here: https://app.datadoghq.com/organization-settings/application-keys .
      Read more about application keys here: https://docs.datadoghq.com/account_management/api-app-keys/#application-keys .
    tags:
    - template_section:Common
  site:
    node_type: setting
    type: string
    default: datadoghq.com
    visibility: public
    description: |-
      The site of the Datadog intake to send Agent data to.
      The site parameter must be set to enable your agent with Remote Configuration.
      Set to 'datadoghq.eu' to send data to the EU site.
      Set to 'us3.datadoghq.com' to send data to the US3 site.
      Set to 'us5.datadoghq.com' to send data to the US5 site.
      Set to 'ap1.datadoghq.com' to send data to the AP1 site.
      Set to 'ddog-gov.com' to send data to the US1-FED site.
    tags:
    - template_section:Common
  infrastructure_mode:
    node_type: setting
    type: string
    default: full
    visibility: public
    description: |-
      Controls which integrations and metadata the Agent collects.
      Valid values:
        - full: default server/host-monitoring behavior (all checks allowed).
        - basic: minimal host-level metrics only.
        - end_user_device: tuned for end-user-device (EUDM) laptops and desktops.
        - cloud_cost_only: Cloud Cost Management lightweight tagging.
        - none: disables infrastructure checks.
    tags:
    - template_section:Common
    comment: |-
      Infrastructure mode
      The infrastructure mode is used to determine the features that are available to the agent.
      The possible values are: full, basic, end_user_device, cloud_cost_only, none.
  dd_url:
    node_type: setting
    type: string
    default: https://app.datadoghq.com
    env_vars:
    - DD_DD_URL
    - DD_URL
    visibility: public
    description: |-
      The host of the Datadog intake server to send metrics to, only set this option
      if you need the Agent to send metrics to a custom URL, it overrides the site
      setting defined in "site". It does not affect APM, Logs, Remote Configuration, or Live Process intake which have their
      own "*_dd_url" settings.
      If DD_DD_URL and DD_URL are both set, DD_DD_URL is used in priority.
    tags:
    - template_section:Common
  proxy:
    node_type: section
    type: object
    visibility: public
    description: |-
      If you need a proxy to connect to the Internet, provide it here (default:
      disabled). Refer to https://docs.datadoghq.com/agent/proxy/ to understand how to use these settings.
      For Logs proxy information, refer to https://docs.datadoghq.com/agent/proxy/#proxy-for-logs
    tags:
    - template_section:Common
    properties:
      https:
        node_type: setting
        type: string
        default: ''
        visibility: public
        description: |-
          @env DD_PROXY_HTTPS - string - optional - default: ""
          The proxy to use for HTTPS requests
        example: http://<USERNAME>:<PASSWORD>@<PROXY_SERVER_FOR_HTTPS>:<PORT>
        tags:
        - no-env
      http:
        node_type: setting
        type: string
        default: ''
        visibility: public
        description: |-
          @env DD_PROXY_HTTP - string - optional - default: ""
          The proxy to use for HTTP requests
        example: http://<USERNAME>:<PASSWORD>@<PROXY_SERVER_FOR_HTTP>:<PORT>
        tags:
        - no-env
      no_proxy:
        node_type: setting
        type: array
        default: []
        items:
          type: string
        visibility: public
        description: |-
          @env DD_PROXY_NO_PROXY - space-separated list of strings - optional - default: []
          A list of hosts for which the proxy setting should not be used
        example: |2-

            - <HOSTNAME-1>
            - <HOSTNAME-2>
        tags:
        - no-env
  skip_ssl_validation:
    node_type: setting
    type: boolean
    default: false
    visibility: public
    description: Setting this option to "true" tells the Agent to skip validation
      of SSL/TLS certificates.
    tags:
    - template_section:Common
  sslkeylogfile:
    node_type: setting
    type: string
    default: ''
    visibility: public
    description: |-
      sslkeylogfile specifies a destination for TLS master secrets
      in NSS key log format to allow external programs
      such as Wireshark to decrypt TLS connections.
      For more details, see https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/Key_Log_Format.
      Use of sslkeylogfile compromises security and should only be
      used for debugging.
    tags:
    - template_section:Common
  min_tls_version:
    node_type: setting
    type: string
    default: tlsv1.2
    visibility: public
    description: |-
      This option defines the minimum TLS version that will be used when
      submitting data to the Datadog intake specified in "site" or "dd_url".
      This parameter defaults to "tlsv1.2".
      Possible values are: tlsv1.0, tlsv1.1, tlsv1.2, tlsv1.3; values are case-
      insensitive.
    tags:
    - template_section:Common
    comment: Configuration for TLS for outgoing connections
  hostname:
    node_type: setting
    type: string
    default: ''
    visibility: public
    description: Force the hostname name for the Agent. By default, the Agent auto-detects
      its hostname.
    example: <HOSTNAME_NAME>
    tags:
    - template_section:Common
  hostname_file:
    node_type: setting
    type: string
    default: ''
    visibility: public
    description: |-
      In some environments, auto-detection of the hostname is not adequate and
      environment variables cannot be used to set the value. In such cases, the
      file on the host can also be used provide an appropriate value. If
      'hostname' value has been set to a non-empty value, this option is ignored.
    example: /var/lib/cloud/data/instance-id
    tags:
    - template_section:Common
  hostname_fqdn:
    node_type: setting
    type: boolean
    default: false
    visibility: public
    description: |-
      When the Agent relies on the OS to determine the hostname, make it use the
      FQDN instead of the short hostname. Recommended value: true
      More information at https://dtdg.co/flag-hostname-fqdn
    tags:
    - template_section:Common
    - full-agent-only:true
    comment: |-
      if/when the default is changed to true, make the default platform
      dependent; default should remain false on Windows to maintain backward
      compatibility with Agent5 behavior/win
  hostname_trust_uts_namespace:
    node_type: setting
    type: boolean
    default: false
    visibility: public
    description: |-
      By default the Agent does not trust the hostname value retrieved from non-root UTS namespace,
      as it's usually a generated name, unrelated to the host (e.g. when running in a container).
      When enabled, the Agent will trust the value retrieved from non-root UTS namespace instead of failing
      hostname resolution.
      (Linux only)
    tags:
    - template_section:Common
    - full-agent-only:true
    comment: |-
      By default the Agent does not trust the hostname value retrieved from non-root UTS namespace.
      When enabled, the Agent will trust the value retrieved from non-root UTS namespace instead of failing
      hostname resolution.
      (Linux only)
  host_aliases:
    node_type: setting
    type: array
    default: []
    items:
      type: string
    visibility: public
    description: |-
      List of host aliases to report in addition to any aliases collected
      automatically from cloud providers.
      More information at
      https://docs.datadoghq.com/agent/faq/how-datadog-agent-determines-the-hostname/?tab=agentv6v7#host-aliases
    example: |2-

        - <ALIAS-1>
        - <ALIAS-2>
    tags:
    - template_section:Common
    - full-agent-only:true
  tags:
    node_type: setting
    type: array
    default: []
    items:
      type: string
    visibility: public
    description: |-
      List of host tags. Attached in-app to every metric, event, log, trace, and service check emitted by this Agent.

      This configuration value merges with `DD_EXTRA_TAGS`, allowing some
      tags to be set in a configuration file (`tags`), and additional tags to be added
      with an environment variable (`DD_EXTRA_TAGS`).

      Learn more about tagging: https://docs.datadoghq.com/tagging/
    example: |2-

        - team:infra
        - <TAG_KEY>:<TAG_VALUE>
    tags:
    - template_section:Common
  extra_tags:
    node_type: setting
    type: array
    default: []
    items:
      type: string
    visibility: public
    description: |-
      List of host tags. Attached in-app to every metric, event, log, trace, and service check emitted by this Agent.

      This configuration value merges with `tags`, allowing some
      tags to be set in a configuration file (`tags`), and additional tags to be added
      with an environment variable (`DD_EXTRA_TAGS`).

      Learn more about tagging: https://docs.datadoghq.com/tagging/
    example: |2-

        - region:northerly
        - <TAG_KEY>:<TAG_VALUE>
    tags:
    - template_section:Common
  env:
    node_type: setting
    type: string
    default: ''
    visibility: public
    description: |-
      The environment name where the agent is running. Attached in-app to every
      metric, event, log, trace, and service check emitted by this Agent.
    example: <environment name>
    tags:
    - template_section:Common
  remote_updates:
    node_type: setting
    type: boolean
    default: true
    visibility: public
    description: Enable remote upgrades and configuration changes for the Agent.
    tags:
    - template_section:Common
    - full-agent-only:true
    comment: Installer configuration
  process_manager:
    node_type: section
    type: object
    visibility: public
    description: |-
      When true (see `enabled` below), the Datadog process manager daemon (dd-procmgrd) is enabled for this host install.
      On Windows, the core Agent starts the Windows service `dd-procmgr-service` when this option is true.
      On Linux, dd-procmgrd is started by systemd (`datadog-agent-procmgr.service` linked to the main Agent unit);
      This setting is ignored on Linux and does not enable or disable the systemd unit.
    tags:
    - template_section:Common
    properties:
      enabled:
        node_type: setting
        type: boolean
        default: true
        visibility: public
        description: |-
          When true (Windows only), the core Agent starts the dd-procmgr-service Windows service.
          On Linux, the process manager daemon is started by systemd; this option is ignored.
        comment: |-
          Process manager (dd-procmgrd): on Windows the core agent starts dd-procmgr-service when enabled.
          On Linux, dd-procmgrd is managed by systemd (datadog-agent-procmgr.service); this setting is ignored there.
  tag_value_split_separator:
    node_type: setting
    type: object
    default: {}
    additionalProperties:
      type: string
    visibility: public
    description: |-
      Split tag values according to a given separator. Only applies to host tags,
      and tags coming from container integrations. It does not apply to tags on dogstatsd metrics,
      and tags collected by other integrations.

      Example use-case:

       With a raw collected tag "foo:1;2;3", using the following configuration:

       tag_value_split_separator:
         foo: ;

       results in the raw tag being transformed into "foo:1", "foo:2", "foo:3" tags
    example: |2-

        <TAG_KEY>: <SEPARATOR>
    tags:
    - template_section:Common
  checks_tag_cardinality:
    node_type: setting
    type: string
    default: low
    visibility: public
    description: |-
      Configure the level of granularity of tags to send for checks metrics and events. Choices are:
        * low: add tags about low-cardinality objects (clusters, hosts, deployments, container images, ...)
        * orchestrator: add tags about pod, (in Kubernetes), or task (in ECS or Mesos) -level of cardinality
        * high: add tags about high-cardinality objects (individual containers, user IDs in requests, ...)
      WARNING: sending container tags for checks metrics may create more metrics
      (one per container instead of one per host). This may impact your custom metrics billing.
    tags:
    - template_section:Common
    - full-agent-only:true
    comment: |-
      Set defaults for config keys that may be accessed but aren't relevant in serverless environments
      to avoid "config key is unknown" and "unable to cast nil" warnings
  dogstatsd_tag_cardinality:
    node_type: setting
    type: string
    default: low
    visibility: public
    description: |-
      Configure the level of granularity of tags to send for DogStatsD metrics and events. Choices are:
        * low: add tags about low-cardinality objects (clusters, hosts, deployments, container images, ...)
        * orchestrator: add tags about pod, (in Kubernetes), or task (in ECS or Mesos) -level of cardinality
        * high: add tags about high-cardinality objects (individual containers, user IDs in requests, ...)

      WARNING: sending container tags for dogstatsd metrics may create more metrics
      (one per container instead of one per host). This may impact your custom metrics billing.
    tags:
    - template_section:Common
    - full-agent-only:true
  histogram_aggregates:
    node_type: setting
    type: array
    default:
    - max
    - median
    - avg
    - count
    items:
      type: string
    visibility: public
    description: |-
      Configure which aggregated value to compute.
      Possible values are: min, max, median, avg, sum and count.
    tags:
    - template_section:Common
  histogram_percentiles:
    node_type: setting
    type: array
    default:
    - '0.95'
    items:
      type: string
    visibility: public
    description: |-
      Configure which percentiles are computed by the Agent. It must be a list of float between 0 and 1.
      Warning: percentiles must be specified as yaml strings
    tags:
    - template_section:Common
  histogram_copy_to_distribution:
    node_type: setting
    type: boolean
    default: false
    visibility: public
    description: |-
      Copy histogram values to distributions for true global distributions (in beta)
      Note: This increases the number of custom metrics created.
    tags:
    - template_section:Common
  histogram_copy_to_distribution_prefix:
    node_type: setting
    type: string
    default: ''
    visibility: public
    description: A prefix to add to distribution metrics created when histogram_copy_to_distributions
      is true
    example: '"<PREFIX>"'
    tags:
    - template_section:Common
  aggregator_stop_timeout:
    node_type: setting
    type: integer
    default: 2
    visibility: public
    description: |-
      When stopping the agent, the Aggregator will try to flush out data ready for
      aggregation (metrics, events, ...). Data are flushed to the Forwarder in order
      to be sent to Datadog, therefore the Agent might take at most
      'aggregator_stop_timeout'+'forwarder_stop_timeout' seconds to exit.

      You can set the maximum amount of time, in seconds, allocated to the
      Aggregator to do so. You can disable this feature by setting
      'aggregator_stop_timeout' to 0.
    tags:
    - template_section:Common
  aggregator_buffer_size:
    node_type: setting
    type: integer
    default: 100
    visibility: public
    description: |-
      The default buffer size for the aggregator use a sane value for most of the
      use cases, however, it could be useful to manually set it in order to trade
      RSS usage with better performances.
    tags:
    - template_section:Common
  forwarder_timeout:
    node_type: setting
    type: integer
    default: 20
    visibility: public
    description: Forwarder timeout in seconds
    tags:
    - template_section:Common
  use_v3_api:
    node_type: section
    type: object
    visibility: public
    description: Controls the use of the v3 metrics intake.
    tags:
    - template_section:Common
    properties:
      series:
        node_type: section
        type: object
        visibility: public
        description: Controls the use of the v3 metrics intake for non-distribution
          metrics (series).
        tags:
        - template_section:Common
        properties:
          enabled:
            node_type: setting
            type: string
            default: datadog_only
            visibility: public
            description: |-
              Global default for the non-distribution metrics intake version. Accepted values:
                - true: v3 for every destination except Observability Pipelines Worker.
                - datadog_only: v3 only when the destination URL is a Datadog endpoint.
                - false: v2 everywhere.
          endpoints:
            node_type: setting
            type: object
            default: {}
            additionalProperties:
              type: string
            visibility: public
            description: |-
              Per-URL override map for non-distribution metrics intake version. The URL
              must match exactly what was configured under `dd_url` or `additional_endpoints`.
              Accepted values:
                - true: v3 for every destination except Observability Pipelines Worker.
                - datadog_only: v3 only when the destination URL is a Datadog endpoint.
                - false: v2 everywhere.
  forwarder_retry_queue_payloads_max_size:
    node_type: setting
    type: integer
    default: 15728640
    visibility: public
    description: |-
      It defines the maximum size in bytes of all the payloads in the forwarder's retry queue.
      The actual memory used is greater than the payloads size as there are extra fields like HTTP headers,
      but no more than 2.5 times the payload size. The default is 15MB.
    tags:
    - template_section:Common
  forwarder_num_workers:
    node_type: setting
    type: integer
    default: 1
    visibility: public
    description: The number of workers used by the forwarder.
    tags:
    - template_section:Common
  forwarder_stop_timeout:
    node_type: setting
    type: integer
    default: 2
    visibility: public
    description: |-
      When stopping the agent, the Forwarder will try to flush all new
      transactions (not the ones in retry state).  New transactions will be created
      as the Aggregator flush it's internal data too, therefore the Agent might take
      at most 'aggregator_stop_timeout'+'forwarder_stop_timeout' seconds to exit.

      You can set the maximum amount of time, in seconds, allocated to the
      Forwarder to send those transactions.  You can disable this feature by setting
      'forwarder_stop_timeout' to 0.
    tags:
    - template_section:Common
  forwarder_http_protocol:
    node_type: setting
    type: string
    default: auto
    visibility: public
    description: The transport type to use for sending logs. Possible values are "auto"
      or "http1".
    tags:
    - template_section:Common
  forwarder_max_concurrent_requests:
    node_type: setting
    type: integer
    default: 10
    visibility: public
    description: |-
      The maximum number of concurrent requests that each worker can have queued up
      at any one time. If the connection is over HTTP/1 each request will be waiting
      for the previous request to complete before sending the next one. With HTTP/2
      each request can be sent before waiting for the response.
    tags:
    - template_section:Common
  forwarder_storage_max_size_in_bytes:
    node_type: setting
    type: integer
    default: 0
    visibility: public
    description: |-
      When the retry queue of the forwarder is full, `forwarder_storage_max_size_in_bytes`
      defines the amount of disk space the Agent can use to store transactions on the disk.
      When `forwarder_storage_max_size_in_bytes` is `0`, the transactions are never stored on the disk.
    example: '50000000'
    tags:
    - template_section:Common
    comment: 0 means disabled. This is a BETA feature.
  forwarder_storage_max_disk_ratio:
    node_type: setting
    type: number
    default: 0.8
    visibility: public
    description: |-
      `forwarder_storage_max_disk_ratio` defines the disk capacity limit for storing transactions.
      `0.8` means the Agent can store transactions on disk until `forwarder_storage_max_size_in_bytes`
      is reached or when the disk mount for `forwarder_storage_path` exceeds 80% of the disk capacity,
      whichever is lower.
    tags:
    - golang_type:float64
    - template_section:Common
    comment: Do not store transactions on disk when the disk usage exceeds 80% of
      the disk capacity. Use 80% as some applications do not behave well when the
      disk space is very small.
  forwarder_outdated_file_in_days:
    node_type: setting
    type: integer
    default: 10
    visibility: public
    description: |-
      This value specifies how many days the overflow transactions will remain valid before
      being discarded. During the Agent restart, if a retry file contains transactions that were
      created more than `forwarder_outdated_file_in_days` days ago, they are removed.
    tags:
    - template_section:Common
  forwarder_high_prio_buffer_size:
    node_type: setting
    type: integer
    default: 100
    visibility: public
    description: |-
      Defines the size of the high prio buffer.
      Increasing the buffer size can help if payload drops occur due to high prio buffer being full.
    tags:
    - template_section:Common
    comment: Forwarder channels buffer size
  forwarder_low_prio_buffer_size:
    node_type: setting
    type: integer
    default: 100
    visibility: public
    description: Defines the size of the low prio buffer.
    tags:
    - template_section:Common
  forwarder_requeue_buffer_size:
    node_type: setting
    type: integer
    default: 100
    visibility: public
    description: Defines the size of the requeue prio buffer.
    tags:
    - template_section:Common
  forwarder_backoff_base:
    node_type: setting
    type: integer
    default: 2
    visibility: public
    description: |-
      Defines the rate of exponential growth, and the first retry interval range.
      Do not set a lower value than the default. You may increase it if you use a proxy that benefits from a
      higher rate of exponential growth.
    tags:
    - template_section:Common
  forwarder_backoff_max:
    node_type: setting
    type: integer
    default: 64
    visibility: public
    description: |-
      Defines the maximum number of seconds to wait for a retry.
      Do not set a lower value than the default. You may increase it if you use a proxy that benefits from a
      higher maximum backoff time.
    tags:
    - template_section:Common
  cloud_provider_metadata:
    node_type: setting
    type: array
    default:
    - aws
    - gcp
    - azure
    - alibaba
    - oracle
    - ibm
    items:
      type: string
    visibility: public
    description: |-
      This option restricts which cloud provider endpoint will be used by the
      agent to retrieve metadata. By default the agent will try # AWS, GCP, Azure
      and alibaba providers. Some cloud provider are not enabled by default to not
      trigger security alert when querying unknown IP (for example, when enabling
      Tencent on AWS).
      Setting an empty list will disable querying any cloud metadata endpoints
      (falling back on system metadata). Disabling metadata for the cloud provider in which an Agent runs may result in
      duplicated hosts in your Datadog account and missing Autodiscovery features

      Possible values are:
      "aws"     AWS EC2, ECS/Fargate
      "gcp"     Google Cloud Provider
      "azure"   Azure
      "alibaba" Alibaba
      "tencent" Tencent
      "oracle"  Oracle Cloud
      "ibm"     IBM Cloud
    tags:
    - template_section:Common
  collect_ec2_tags:
    node_type: setting
    type: boolean
    default: false
    visibility: public
    description: |-
      Collect AWS EC2 custom tags as host tags.
      Requires one of:
       - `collect_ec2_tags_use_imds: true` and configuration of the
         EC2 instance to allow tags in instance metadata; or
       - configuration of the EC2 instance to have an IAM role with
         the `EC2:DescribeTags` permission.
      See docs for further details:
      https://docs.datadoghq.com/integrations/faq/how-do-i-pull-my-ec2-tags-without-using-the-aws-integration/
    tags:
    - template_section:Common
    - full-agent-only:true
  collect_ec2_instance_info:
    node_type: setting
    type: boolean
    default: false
    visibility: public
    description: |-
      Extend host tags with AWS EC2 instance information. The added tags are:
       - region
       - instance-type
       - aws_account
       - image
       - availability-zone

      This should only be enabled when the Datadog AWS integration cannot be enabled (see
      https://docs.datadoghq.com/integrations/amazon_web_services/ for more information on the AWS integration).
      Using the AWS integration is recommended as it offers more features and a better integration with the AWS environment.
    tags:
    - template_section:Common
    - full-agent-only:true
  exclude_ec2_tags:
    node_type: setting
    type: array
    default: []
    items:
      type: string
    visibility: public
    description: |-
      EC2 tags to exclude from being converted into host tags. This does not impact tags collected by the AWS Integration
      (see https://docs.datadoghq.com/integrations/amazon_web_services/ for more information on the AWS integration).

      This requires 'collect_ec2_tags' setting to be set to true.
    tags:
    - template_section:Common
    - full-agent-only:true
  collect_ec2_tags_use_imds:
    node_type: setting
    type: boolean
    default: false
    visibility: public
    description: |-
      Use instance metadata service (IMDS) instead of EC2 API to collect AWS EC2 custom tags.

      This requires 'collect_ec2_tags' setting to be set to true.
    tags:
    - template_section:Common
    - full-agent-only:true
  ec2_metadata_timeout:
    node_type: setting
    type: integer
    default: 300
    visibility: public
    description: Timeout in milliseconds on calls to the AWS EC2 metadata endpoints.
    tags:
    - template_section:Common
    - full-agent-only:true
    comment: value in milliseconds
  ec2_prefer_imdsv2:
    node_type: setting
    type: boolean
    default: false
    visibility: public
    description: |-
      If this flag is true then the agent will request EC2 metadata using IMDS v2,
      which offers additional security for accessing metadata. However, in some
      situations (such as a containerized agent on a plain EC2 instance) it may
      require additional configuration on the AWS side. See the AWS guidelines
      for further details:
      https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/configuring-instance-metadata-service.html#instance-metadata-transition-to-version-2
    tags:
    - template_section:Common
    - full-agent-only:true
  ec2_prioritize_instance_id_as_hostname:
    node_type: setting
    type: boolean
    default: false
    visibility: public
    description: |-
      On EC2, prefer the instance ID as the Agent hostname even when the OS hostname does not match
      the known generic EC2 prefixes. By default, the Agent uses the instance ID if the OS hostname
      has a generic EC2 prefix to avoid merging multiple instances under one host. This is useful
      when using custom images that share the same system hostname.
    tags:
    - template_section:Common
    - full-agent-only:true
    comment: used to bypass the hostname detection logic and force the EC2 instance
      ID as a hostname.
  collect_gce_tags:
    node_type: setting
    type: boolean
    default: true
    visibility: public
    description: Collect Google Cloud Engine metadata as host tags
    tags:
    - template_section:Common
    - full-agent-only:true
    comment: GCE
  exclude_gce_tags:
    node_type: setting
    type: array
    default:
    - bosh_settings
    - cli-cert
    - common-psm1
    - configure-sh
    - containerd-configure-sh
    - disable-address-manager
    - disable-legacy-endpoints
    - enable-oslogin
    - gce-container-declaration
    - google-container-manifest
    - ipsec-cert
    - k8s-node-setup-psm1
    - kube-env
    - kubeconfig
    - kubelet-config
    - serial-port-logging-enable
    - shutdown-script
    - ssh-keys
    - sshKeys
    - ssl-cert
    - startup-script
    - user-data
    - windows-keys
    - windows-startup-script-ps1
    items:
      type: string
    visibility: public
    description: |-
      Google Cloud Engine metadata attribute to exclude from being converted into
      host tags -- only applicable when collect_gce_tags is true.
    tags:
    - template_section:Common
    - full-agent-only:true
  gce_send_project_id_tag:
    node_type: setting
    type: boolean
    default: false
    visibility: public
    description: |-
      Send the project ID host tag with the `project_id:` tag key in addition to
      the `project:` tag key.
    tags:
    - template_section:Common
    - full-agent-only:true
  gce_metadata_timeout:
    node_type: setting
    type: integer
    default: 1000
    visibility: public
    description: Timeout in milliseconds on calls to the GCE metadata endpoints.
    tags:
    - template_section:Common
    - full-agent-only:true
    comment: value in milliseconds
  collect_gpu_tags:
    node_type: setting
    type: boolean
    default: true
    visibility: public
    description: Collect GPU related host tags
    tags:
    - template_section:Common
    - full-agent-only:true
    comment: GPU
  gpu:
    $ref: gpu.yaml
  azure_metadata_timeout:
    node_type: setting
    type: integer
    default: 300
    visibility: public
    description: Timeout in milliseconds on calls to the Azure metadata endpoints.
    tags:
    - template_section:Common
    - full-agent-only:true
  azure_hostname_style:
    node_type: setting
    type: string
    default: os
    visibility: public
    description: |-
      Changes how agent hostname is set on Azure virtual machines.

      Possible values:
        "os" - use the hostname reported by the operating system (default)
        "name" - use the instance name
        "name_and_resource_group" - use a combination of the instance name and resource group name
        "full" - use a combination of the instance name, resource group name and subscription id
        "vmid" - use the instance id
    tags:
    - template_section:Common
    - full-agent-only:true
    comment: Azure
  azure_metadata_api_version:
    node_type: setting
    type: string
    default: '2021-02-01'
    visibility: public
    description: |-
      The API version to use when querying the Azure Instance Metadata Service (IMDS).
      Change this if you need to use a different API version for compatibility reasons.
    tags:
    - template_section:Common
    - full-agent-only:true
  scrubber:
    node_type: section
    type: object
    visibility: public
    description: Configuration for scrubbing sensitive information from the Agent's
      logs, configuration and flares.
    tags:
    - template_section:Common
    properties:
      additional_keys:
        node_type: setting
        type: array
        default: []
        items:
          type: string
        visibility: public
        description: |-
          By default, the Agent removes known sensitive keys from Agent and integrations YAML configs before
          including them in the flare.
          Use this parameter to define additional sensitive keys that the Agent should scrub from
          the YAML files included in the flare.
        example: |2-

            - "sensitive_key_1"
            - "sensitive_key_2"
  no_proxy_nonexact_match:
    node_type: setting
    type: boolean
    default: false
    visibility: public
    description: |-
      Enable more flexible no_proxy matching. See https://godoc.org/golang.org/x/net/http/httpproxy#Config
      for more information on accepted matching criteria.
    tags:
    - template_section:Common
  use_proxy_for_cloud_metadata:
    node_type: setting
    type: boolean
    default: false
    visibility: public
    description: |-
      By default cloud provider IP's are added to the transport's `no_proxy` list.
      Use this parameter to remove them from the `no_proxy` list.
    tags:
    - template_section:Common
  inventories_configuration_enabled:
    node_type: setting
    type: boolean
    default: true
    visibility: public
    description: |-
      By default the Agent sends its own configuration to Datadog to be displayed in the `Agent Configuration` section of the host
      detail panel. See https://docs.datadoghq.com/infrastructure/list/#agent-configuration for more information.

      The Agent configuration is scrubbed of any sensitive information.
    tags:
    - template_section:Common
    - full-agent-only:true
    comment: controls the agent configurations
  metadata_ip_resolution_from_hostname:
    node_type: setting
    type: boolean
    default: false
    visibility: public
    description: |-
      By default, the Agent uses the first interface in the list of network interfaces to determine the IP address of the host.
      If you set this option to true, the Agent tries to resolve the host name to determine the host's IP address.
      If this is unsuccessful, the Agent falls back to the default behavior.
      This option is useful when the first interface is not the one you want to use to determine the host's IP address, or when
      you define the hostname in the /etc/hosts configuration file.
    tags:
    - template_section:Common
    - full-agent-only:true
    comment: resolve the hostname to get the IP address
  auto_exit:
    node_type: section
    type: object
    visibility: public
    description: 'Configuration for the automatic exit mechanism: the Agent stops
      when some conditions are met.'
    tags:
    - template_section:Common
    properties:
      noprocess:
        node_type: section
        type: object
        visibility: public
        description: |-
          Configure the `noprocess` automatic exit method.
          Detect when no other processes (non-agent) are running to trigger automatic exit. `HOST_PROC` is taken into account when gathering processes.
          Feature is only supported on POSIX systems.
        tags:
        - template_section:Common
        properties:
          enabled:
            node_type: setting
            type: boolean
            default: false
            visibility: public
            description: Enable the `noprocess` method
          excluded_processes:
            node_type: setting
            type: array
            default: []
            items:
              type: string
            visibility: public
            description: List of regular expressions to exclude extra processes (on
              top of built-in list).
      validation_period:
        node_type: setting
        type: integer
        default: 60
        visibility: public
        description: |-
          Time (in seconds) delay during which the auto exit validates that the selected method continuously detects an exit condition, before exiting.
          The value is verified every 30s. By default, three consecutive checks need to return true to trigger an automatic exit.
        comment: Auto exit configuration
  remote_configuration:
    $ref: remote_configuration.yaml
  fips:
    node_type: section
    type: object
    visibility: public
    description: Uncomment this parameter and the one below to enable them.
    tags:
    - template_section:Common
    properties:
      enabled:
        node_type: setting
        type: boolean
        default: false
        visibility: public
        description: |-
          This feature is in BETA.

          Enable the use of the FIPS proxy to send data to the DataDog backend. Enabling this will force all outgoing traffic
          from the Agent to the local proxy.
          It's important to note that enabling this will not make the Datadog Agent FIPS compliant, but will force all outgoing
          traffic to a local FIPS compliant proxy. The FIPS proxy need to be installed locally in addition to the agent.

          When setting this to true the following settings would be overridden, ignoring the values from the
          configuration:
          - dd_url
          - apm_config.apm_dd_url
          - apm_config.profiling_dd_url
          - apm_config.telemetry.dd_url
          - process_config.process_dd_url
          - logs_config.use_http
          - logs_config.logs_no_ssl
          - logs_config.logs_dd_url
          - database_monitoring.metrics.dd_url
          - database_monitoring.activity.dd_url
          - database_monitoring.samples.dd_url
          - compliance_config.endpoints.dd_url
          - runtime_security_config.endpoints.dd_url
          - network_devices.metadata.dd_url

          The agent will also ignore 'proxy.*' settings and environment variables related to proxy (HTTP_PROXY, HTTPS_PROXY,
          DD_PROXY_HTTP and DD_PROXY_HTTPS).
      local_address:
        node_type: setting
        type: string
        default: localhost
        visibility: public
        description: The local address that the FIPS proxy will bind ports on.
      https:
        node_type: setting
        type: boolean
        default: true
      port_range_start:
        node_type: setting
        type: integer
        default: 9803
      tls_verify:
        node_type: setting
        type: boolean
        default: true
  observability_pipelines_worker:
    node_type: section
    type: object
    visibility: public
    description: |-
      Configuration for forwarding telemetry to an Observability Pipelines Worker instead of Datadog.
      https://www.datadoghq.com/product/observability-pipelines/
      Note: This config is interchangeable with `vector`
    tags:
    - template_section:Common
    properties:
      metrics:
        node_type: section
        type: object
        visibility: public
        description: Specific configurations for metrics
        tags:
        - template_section:Common
        properties:
          enabled:
            node_type: setting
            type: boolean
            default: false
            visibility: public
            description: Enables forwarding of metrics to an Observability Pipelines
              Worker
            comment: metrics options
          url:
            node_type: setting
            type: string
            default: ''
            visibility: public
            description: URL endpoint for the Observability Pipelines Worker to send
              metrics to
            example: '"http://127.0.0.1:8080"'
          use_v3_api:
            node_type: section
            type: object
            properties:
              series:
                node_type: setting
                type: boolean
                default: false
      logs:
        node_type: section
        type: object
        visibility: public
        description: Specific configurations for logs
        tags:
        - template_section:Common
        properties:
          enabled:
            node_type: setting
            type: boolean
            default: false
            visibility: public
            description: Enables forwarding of logs to an Observability Pipelines
              Worker
            comment: logs options
          url:
            node_type: setting
            type: string
            default: ''
            visibility: public
            description: URL endpoint for the Observability Pipelines Worker to send
              logs to
            example: '"http://127.0.0.1:8080"'
          dual_ship:
            node_type: setting
            type: boolean
            default: false
            visibility: public
            description: |-
              When false (default), the Observability Pipelines Worker replaces the primary
              Datadog logs intake as the sole destination. When true, logs are sent to BOTH
              the primary Datadog intake and the Observability Pipelines Worker, which is
              useful for evaluating OPW without interrupting the existing flow of telemetry
              to Datadog.
            comment: "dual_ship is logs-only: there is no equivalent dual-shipping\
              \ code path for metrics, so\nthese keys live outside bindVectorOptions\
              \ to avoid registering an unused metrics variant.\n\ndual_ship: when\
              \ false (default), OPW replaces the primary Datadog endpoint and is\
              \ the only\ndestination logs are shipped to. When true, Datadog remains\
              \ the primary endpoint and OPW is\nadded as an additional endpoint \u2014\
              \ intended for operators evaluating OPW without interrupting\nthe existing\
              \ flow of telemetry to Datadog.\n\ndual_ship_reliable: when dual_ship=true,\
              \ controls whether the OPW additional endpoint applies\nbackpressure\
              \ to the main pipeline on failure (true) or is best-effort (false, the\
              \ default).\nBest-effort is the safer default: an unreachable OPW must\
              \ not block delivery to Datadog."
          dual_ship_reliable:
            node_type: setting
            type: boolean
            default: false
            visibility: public
            description: |-
              Only meaningful when `dual_ship` is true. When false (default), the OPW
              destination is treated as best-effort: failures to OPW do not apply
              backpressure to the main pipeline, so an unhealthy OPW cannot stall delivery
              to Datadog. Set to true to make the OPW destination reliable, meaning its
              failures participate in flow control just like the primary Datadog endpoint.
      traces:
        node_type: section
        type: object
        visibility: public
        description: Specific configurations for traces
        tags:
        - template_section:Common
        properties:
          enabled:
            node_type: setting
            type: boolean
            default: false
            visibility: public
            description: Enables forwarding of traces to an Observability Pipelines
              Worker
            comment: Vector options for traces
          url:
            node_type: setting
            type: string
            default: ''
            visibility: public
            description: URL endpoint for the Observability Pipelines Worker to send
              traces to
            example: '"http://127.0.0.1:8080"'
  confd_path:
    node_type: setting
    title: Advanced Configuration
    type: string
    default: ${conf_path}/conf.d
    visibility: public
    description: |-
      The path containing check configuration files. By default, uses the conf.d folder
      located in the Agent configuration folder.
    tags:
    - template_section:Agent
  additional_checksd:
    node_type: setting
    type: string
    default: ${conf_path}/checks.d
    visibility: public
    description: |-
      Additional path indicating where to search for Python checks. By default, uses the checks.d folder
      located in the Agent configuration folder.
    tags:
    - template_section:Agent
  expvar_port:
    node_type: setting
    type: integer
    default: 5000
    visibility: public
    description: The port for the go_expvar server.
    tags:
    - template_section:Agent
    - full-agent-only:true
    comment: Go_expvar server port
  cmd_port:
    node_type: setting
    type: integer
    default: 5001
    visibility: public
    description: The port on which the IPC api listens.
    tags:
    - template_section:Agent
  GUI_port:
    node_type: setting
    type: integer
    visibility: public
    description: |-
      The port for the browser GUI to be served.
      Setting 'GUI_port: -1' turns off the GUI completely
      Default is:
       * Windows & macOS : `5002`
       * Linux: `-1`
    tags:
    - template_section:Agent
    platform_default:
      darwin: 5002
      windows: 5002
      other: -1
    comment: Agent GUI access port
  GUI_session_expiration:
    node_type: setting
    type: integer
    default: 0
    visibility: public
    description: |-
      The duration after which a GUI session will expire.
      Setting 'GUI_SESSION_EXPIRATION: 0' disable session expiration.
      Default is "0s" (sessions do not expire).
    example: <SESSION_EXPIRATION_DURATION>
    tags:
    - template_section:Agent
  health_port:
    node_type: setting
    type: integer
    default: 0
    visibility: public
    description: |-
      The Agent can expose its health check on a dedicated http port.
      This is useful for orchestrators that support http probes.
      Default is 0 (disabled), set a valid port number (eg. 5555) to enable.
    tags:
    - golang_type:int64
    - template_section:Agent
  check_runners:
    node_type: setting
    type: integer
    default: 4
    visibility: public
    description: |-
      The `check_runners` refers to the number of concurrent check runners available for check instance execution.
      The scheduler attempts to spread the instances over the collection interval and will _at most_ be
      running the number of check runners instances concurrently.
      Setting the value to 1 would result in checks running sequentially.

      This is a sensitive setting, and we do NOT recommend changing the default number
      of check runners in the general case. The level of concurrency has effects on
      the Agent's: RSS memory, CPU load, resource contention overhead, etc.
    tags:
    - golang_type:int64
    - template_section:Agent
  enable_metadata_collection:
    node_type: setting
    type: boolean
    default: true
    visibility: public
    description: |-
      Metadata collection should always be enabled, except if you are running several
      agents/dsd instances per host. In that case, only one Agent should have it on.
      WARNING: disabling it on every Agent leads to display and billing issues.
    tags:
    - template_section:Agent
  enable_gohai:
    node_type: setting
    type: boolean
    default: true
    visibility: public
    description: Enable the gohai collection of systems data.
    tags:
    - template_section:Agent
  enable_signing_metadata_collection:
    node_type: setting
    type: boolean
    default: true
    visibility: public
    description: Enable the Linux package signing medatada collection.
    tags:
    - template_section:Agent
  server_timeout:
    node_type: setting
    type: integer
    default: 30
    visibility: public
    description: IPC api server timeout in seconds.
    tags:
    - template_section:Agent
    - full-agent-only:true
    comment: IPC API server timeout
  procfs_path:
    node_type: setting
    type: string
    default: ''
    visibility: public
    description: |-
      Some environments may have the procfs file system mounted in a miscellaneous
      location. The procfs_path configuration parameter provides a mechanism to
      override the standard default location: '/proc' - this setting trickles down to
      integrations and affect their behavior if they rely on the psutil python package.
    example: <PROCFS_PATH>
    tags:
    - template_section:Agent
  disable_py3_validation:
    node_type: setting
    type: boolean
    default: false
    visibility: public
    description: Disable Python3 validation of python checks.
    tags:
    - template_section:CoreAgent
  python3_linter_timeout:
    node_type: setting
    type: integer
    default: 120
    visibility: public
    description: Timeout in seconds for validation of compatibility with python 3
      when running python 2.
    tags:
    - template_section:CoreAgent
    - full-agent-only:true
    comment: |-
      Python 3 linter timeout, in seconds
      NOTE: linter is notoriously slow, in the absence of a better solution we
      can only increase this timeout value. Linting operation is async.
  memtrack_enabled:
    node_type: setting
    type: boolean
    default: false
    visibility: public
    description: Enables tracking of memory allocations made from the python runtime
      loader.
    tags:
    - template_section:CoreAgent
  tracemalloc_debug:
    node_type: setting
    type: boolean
    default: false
    visibility: public
    description: |-
      Enables debugging with tracemalloc for python checks.
      Please note that when this option is enabled the number of check runners is overridden to 1.
    tags:
    - template_section:CoreAgent
  tracemalloc_include:
    node_type: setting
    type: string
    default: ''
    visibility: public
    description: |-
      Comma-separated list of Python checks to enable tracemalloc for when `tracemalloc_debug` is true.
      By default, all Python checks are enabled.
    example: <TRACEMALLOC_INCLUDE>
    tags:
    - template_section:CoreAgent
  tracemalloc_exclude:
    node_type: setting
    type: string
    default: ''
    visibility: public
    description: |-
      Comma-separated list of Python checks to disable tracemalloc for when `tracemalloc_debug` is true.
      By default, all Python checks are enabled. This setting takes precedence over `tracemalloc_include`.
    example: <TRACEMALLOC_EXCLUDE>
    tags:
    - template_section:CoreAgent
  windows_use_pythonpath:
    node_type: setting
    type: boolean
    default: false
    visibility: public
    description: |-
      Whether to honour the value of the PYTHONPATH env var when set on Windows.
      Disabled by default, so we only load Python libraries bundled with the Agent.
    tags:
    - template_section:CoreAgent
    - full-agent-only:true
    comment: Whether to honour the value of PYTHONPATH, if set, on Windows. On other
      OSes we always do.
  secret_backend_type:
    node_type: setting
    type: string
    default: ''
    visibility: public
    description: |-
      `secret_backend_type` is the type of backend where secrets are stored.
      Supported backends are: "aws.secrets", "aws.ssm", "azure.keyvault", "hashicorp.vault",
      "file.json", "file.yaml"
      For more information see: https://docs.datadoghq.com/agent/configuration/secrets-management

      This option is ignored if 'secret_backend_command' is set.
    example: <BACKEND_TYPE>
    tags:
    - template_section:Agent
    - full-agent-only:true
    comment: secrets backend
  secret_backend_config:
    node_type: setting
    type: object
    default: {}
    visibility: public
    description: |-
      The section contains configuration required by `secret_backend_type` to resolve secrets.
      The necessary configuration depends upon which type is used.
      For more information see: https://docs.datadoghq.com/agent/configuration/secrets-management
    example: |2-

        <KEY_1>: <VALUE_1>
    tags:
    - golang_type:map[string]interface{}
    - template_section:Agent
    - full-agent-only:true
  multi_secret_backends:
    node_type: setting
    type: object
    default: {}
    visibility: public
    description: |-
      `multi_secret_backends` defines named secret backends for routing. Each entry specifies a `type`
      and optional `config`. Use `ENC[backendID;secretKey]` handles to route secrets to the named backend.
      This option is ignored if `secret_backend_command` or `secret_backend_type` is set.
      For more information see: https://docs.datadoghq.com/agent/configuration/secrets-management
    example: |2-

        <backend_name>:
          type: <backend_type>
          config:
            <KEY_1>: <VALUE_1>
    tags:
    - golang_type:map[string]interface{}
    - template_section:Agent
    - full-agent-only:true
  secret_refresh_interval:
    node_type: setting
    type: integer
    default: 0
    visibility: public
    description: |-
      `secret_refresh_interval` is the interval (in seconds) at which api/app key secrets are refreshed. A 0 value means the feature is disabled.
      For more information see: https://docs.datadoghq.com/agent/configuration/secrets-management/#refreshing-apiapp-keys-at-runtime
    tags:
    - template_section:Agent
    - full-agent-only:true
  secret_refresh_on_api_key_failure_interval:
    node_type: setting
    type: integer
    default: 0
    visibility: public
    description: |-
      `secret_refresh_on_api_key_failure_interval` is the time in minutes between two secret refreshes
      triggered by the Agent using an invalid or expired API key (HTTP error code 403 received or the
      health probe failing). This rate limits how often the secrets are refreshed in response to errors.
      Set to 0 to disable the refresh.

      For more information see: https://docs.datadoghq.com/agent/configuration/secrets-management/#refreshing-apiapp-keys-at-runtime
    tags:
    - template_section:Agent
    - full-agent-only:true
  secret_refresh_scatter:
    node_type: setting
    type: boolean
    default: true
    visibility: public
    description: |-
      `secret_refresh_scatter`, if set to true, will randomize the first secret refresh. `secret_refresh_interval` needs to be set
      for this to take effect. This prevents a fleet of Agents from refreshing their secrets at the same time.
      For more information see: https://docs.datadoghq.com/agent/configuration/secrets-management/#refreshing-apiapp-keys-at-runtime
    tags:
    - template_section:Agent
    - full-agent-only:true
  secret_backend_command:
    node_type: setting
    type: string
    default: ''
    visibility: public
    description: |-
      `secret_backend_command` is the path to your custom script to execute to fetch secrets.
      The executable must have specific rights that differ on Windows and Linux.

      This option take precedence over `secret_backend_type`.

      For more information see: https://docs.datadoghq.com/agent/configuration/secrets-management
    example: <COMMAND_PATH>
    tags:
    - template_section:Agent
    comment: secrets backend
  secret_backend_arguments:
    node_type: setting
    type: array
    default: []
    items:
      type: string
    visibility: public
    description: |-
      If secret_backend_command is set, specify here a list of arguments to give to the command at each run.

      This option take precedence over `secret_backend_type`.
    example: |2-

        - <ARGUMENT_1>
        - <ARGUMENT_2>
    tags:
    - template_section:Agent
  secret_backend_output_max_size:
    node_type: setting
    type: integer
    default: 1048576
    visibility: public
    description: The size in bytes of the buffer used to store the command answer
      (apply to both stdout and stderr)
    tags:
    - template_section:Agent
  secret_backend_timeout:
    node_type: setting
    type: integer
    default: 30
    visibility: public
    description: The timeout to execute the command in second
    tags:
    - template_section:Agent
  secret_backend_skip_checks:
    node_type: setting
    type: boolean
    default: false
    visibility: public
    description: Disable fetching secrets for check configurations
    tags:
    - template_section:Agent
  secret_backend_remove_trailing_line_break:
    node_type: setting
    type: boolean
    default: false
    visibility: public
    description: |-
      Remove trailing line breaks from secrets returned by the secret_backend_command. Some secret management tools automatically
      add a line break when exporting secrets through files.
    tags:
    - template_section:Agent
    - full-agent-only:true
  secret_scope_integration_to_their_k8s_namespace:
    node_type: setting
    type: boolean
    default: false
    visibility: public
    description: |-
      When using `k8s_secret@` notation to pull secrets from Kubernetes, you can limit integration to only be able to access
      their own namespace by setting this setting to true.
      The limitation will only apply integration's config and secret using `k8s_secret@` secrets.

      This setting is incompatible with 'secret_allowed_k8s_namespace' and 'secret_image_to_handle'

      See https://docs.datadoghq.com/agent/configuration/secrets-management for more information on using Kubernetes
      secrets in your configuration.
    tags:
    - template_section:Agent
    - full-agent-only:true
  secret_allowed_k8s_namespace:
    node_type: setting
    type: array
    default: []
    items:
      type: string
    visibility: public
    description: |-
      When using `k8s_secret@` notation to pull secrets from Kubernetes, you can limit all integrations to only be able to access
      a list of specific namespace.
      The limitation will only apply integration's config and secret using `k8s_secret@` secrets.

      This setting is incompatible with 'secret_scope_integration_to_their_k8s_namespace' and 'secret_image_to_handle'

      See https://docs.datadoghq.com/agent/configuration/secrets-management for more information on using Kubernetes
      secrets in your configuration.
    tags:
    - template_section:Agent
    - full-agent-only:true
  secret_image_to_handle:
    node_type: setting
    type: object
    default: {}
    additionalProperties:
      items:
        type: string
      type: array
    visibility: public
    description: |-
      When using `k8s_secret@` notation to pull secrets from Kubernetes, you can fully control which Kubernetes secret can
      be access by which image. Any secrets using the `k8s_secret@` prefix not listed for the image being monitored will
      not be resolved.
      The limitation will only apply integration's config and secret using `k8s_secret@` secrets.

      This setting is incompatible with 'secret_scope_integration_to_their_k8s_namespace' and 'secret_image_to_handle'

      See https://docs.datadoghq.com/agent/configuration/secrets-management for more information on using Kubernetes
      secrets in your configuration.
    example: |2-

        webserver:
          - "k8s_secret@prod/weserver/db_password"
          - "k8s_secret@prod/weserver/db_password"
        <Kubernetes image name>:
          - "<full secret handle>"
          - ...
    tags:
    - template_section:Agent
    - full-agent-only:true
  system_tray:
    node_type: section
    title: Datadog Agent Manager System Tray Configuration
    type: object
    visibility: public
    description: This section configures the Datadog Agent Manager System Tray
    tags:
    - full-agent-only:true
    - platform_only:windows
    - template_section:Agent
    properties:
      log_file:
        node_type: setting
        type: string
        default: ${log_path}/ddtray.log
        visibility: public
        description: The full path to the file where Datadog Agent Manager System
          Tray logs are written.
        example: '"c:\\programdata\\datadog\\logs\\ddtray.log"'
        comment: Datadog Agent Manager System Tray
  logs_enabled:
    node_type: setting
    title: Log collection Configuration
    type: boolean
    default: false
    visibility: public
    description: Enable Datadog Agent log collection by setting logs_enabled to true.
    tags:
    - template_section:LogsAgent
    comment: |-
      External Use: modify those parameters to configure the logs-agent.
      enable the logs-agent:
  logs_config:
    $ref: logs_config.yaml
  apm_config:
    $ref: apm_config.yaml
  process_config:
    $ref: process_config.yaml
  network_path:
    node_type: section
    title: Network Path Dynamic Test Configuration
    type: object
    visibility: public
    description: Network Path configuration
    tags:
    - full-agent-only:true
    - platform_only:windows,linux
    - template_section:CoreAgent
    properties:
      connections_monitoring:
        node_type: section
        type: object
        visibility: public
        description: Configurations for Network Path Dynamic Test for monitoring network
          connections via Network Path.
        tags:
        - template_section:CoreAgent
        properties:
          enabled:
            node_type: setting
            type: boolean
            default: false
            visibility: public
            description: Enables Network Path Dynamic Test for monitoring network
              connections via Network Path.
            example: 'true'
            comment: Network Path
      collector:
        node_type: section
        type: object
        visibility: public
        description: |-
          Configuration related to Network Path Collector used for Network Path Dynamic Test
          to monitor network traffic connections on the host.
        tags:
        - template_section:CoreAgent
        properties:
          workers:
            node_type: setting
            type: integer
            default: 4
            visibility: public
            description: The number of concurrent workers available for network path
              execution.
          timeout:
            node_type: setting
            type: integer
            default: 1000
            visibility: public
            description: The timeout in milliseconds for a network path test.
          max_ttl:
            node_type: setting
            type: integer
            default: 30
            visibility: public
            description: The maximum TTL (Time To Live) for traceroute tests.
          pathtest_ttl:
            node_type: setting
            type: string
            default: 70m
            visibility: public
            description: |-
              The duration (time-to-live) a connection will be monitored when it's not seen anymore.
              The TTL is reset each time the connection is seen again.
              With 30min interval, 70m will allow running a test 3 times (t0, t30, t60).
            comment: with 30min interval, 70m will allow running a test 3 times (t0,
              t30, t60)
          pathtest_interval:
            node_type: setting
            type: string
            default: 30m
            visibility: public
            description: The traceroute run interval for monitored connections.
          filters:
            node_type: setting
            type: array
            default: []
            items:
              additionalProperties:
                type: string
              type: object
            visibility: public
            description: |-
              Custom filters to include or exclude specific destinations from network path collection.
              Filters support matching by domain (with wildcard or regex) and by IP address (single IP or CIDR notation).
              Filters are applied sequentially, the last matching filter takes precedence.
              In end_user_device infrastructure mode, user-defined filters are appended to the default SaaS filters below.
            example: |2-


                # ===== Filter syntax examples =====

                # Exclude single domain
                # - match_domain: 'api.slack.com'
                #   type: exclude

                # Exclude domain using wildcard (default strategy)
                # - match_domain: '*.datadoghq.com'      # translates to regex '.*\.datadoghq\.com'
                #   type: exclude
                # - match_domain: '*.zoom.us'
                #   match_domain_strategy: wildcard      # use wildcard to match domain (default)
                #   type: exclude

                # Exclude single IP or using CIDR notation
                # - match_ip: 10.10.10.10
                #   type: exclude
                # - match_ip: 10.20.0.0/24
                #   type: exclude

                # Exclude using regex
                # - match_domain: '.*\.zoom\.us'
                #   match_domain_strategy: regex         # use regex to match domain
                #   type: exclude

                # Include specific domain
                # - match_domain: 'api.datadoghq.com'
                #   type: include
          traceroute_queries:
            node_type: setting
            type: integer
            default: 3
            visibility: public
            description: The number of traceroute queries for static path tests.
          e2e_queries:
            node_type: setting
            type: integer
            default: 50
            visibility: public
            description: The number of end-to-end queries for static path tests.
          input_chan_size:
            node_type: setting
            type: integer
            default: 1000
            visibility: public
            description: The size of the input channel buffer.
          processing_chan_size:
            node_type: setting
            type: integer
            default: 1000
            visibility: public
            description: The size of the processing channel buffer.
          pathtest_contexts_limit:
            node_type: setting
            type: integer
            default: 1000
            visibility: public
            description: The maximum number of pathtest contexts that can be maintained.
          dest_excludes:
            node_type: setting
            type: object
            default: {}
            additionalProperties:
              items:
                type: string
              type: array
          disable_intra_vpc_collection:
            node_type: setting
            type: boolean
            default: false
          disable_source_public_ip_collection:
            node_type: setting
            type: boolean
            default: false
          disable_windows_driver:
            node_type: setting
            type: boolean
            default: false
          flush_interval:
            node_type: setting
            type: string
            default: 10s
          icmp_mode:
            node_type: setting
            type: string
            default: ''
          monitor_ip_without_domain:
            node_type: setting
            type: boolean
            default: false
          pathtest_max_burst_duration:
            node_type: setting
            type: string
            default: 30s
          pathtest_max_per_minute:
            node_type: setting
            type: integer
            default: 150
          reverse_dns_enrichment:
            node_type: section
            type: object
            properties:
              enabled:
                node_type: setting
                type: boolean
                default: true
              timeout:
                node_type: setting
                type: integer
                default: 5000
          source_excludes:
            node_type: setting
            type: object
            default: {}
            additionalProperties:
              items:
                type: string
              type: array
          tcp_method:
            node_type: setting
            type: string
            default: ''
          tcp_syn_paris_traceroute_mode:
            node_type: setting
            type: boolean
            default: false
      forwarder:
        node_type: section
        type: object
        properties:
          additional_endpoints:
            node_type: setting
            type: array
            default: []
            items:
              type: object
          batch_max_concurrent_send:
            node_type: setting
            type: integer
            default: 0
          batch_max_content_size:
            node_type: setting
            type: integer
            default: 5000000
          batch_max_size:
            node_type: setting
            type: integer
            default: 1000
          batch_wait:
            node_type: setting
            type: number
            default: 5
            tags:
            - golang_type:float64
          compression_kind:
            node_type: setting
            type: string
            default: zstd
          compression_level:
            node_type: setting
            type: integer
            default: 6
          connection_reset_interval:
            node_type: setting
            type: integer
            default: 0
          dd_url:
            node_type: setting
            type: string
            default: ''
          dev_mode_no_ssl:
            node_type: setting
            type: boolean
            default: false
            tags:
            - no-env
          input_chan_size:
            node_type: setting
            type: integer
            default: 100
          logs_dd_url:
            node_type: setting
            type: string
            default: ''
          logs_no_ssl:
            node_type: setting
            type: boolean
            default: false
          sender_backoff_base:
            node_type: setting
            type: number
            default: 1
            tags:
            - golang_type:float64
          sender_backoff_factor:
            node_type: setting
            type: number
            default: 2
            tags:
            - golang_type:float64
          sender_backoff_max:
            node_type: setting
            type: number
            default: 120
            tags:
            - golang_type:float64
          sender_recovery_interval:
            node_type: setting
            type: integer
            default: 2
          sender_recovery_reset:
            node_type: setting
            type: boolean
            default: false
          use_compression:
            node_type: setting
            type: boolean
            default: true
          use_v2_api:
            node_type: setting
            type: boolean
            default: true
          zstd_compression_level:
            node_type: setting
            type: integer
            default: 1
      netflow_monitoring:
        node_type: section
        type: object
        properties:
          enabled:
            node_type: setting
            type: boolean
            default: false
      remote_config:
        node_type: section
        type: object
        properties:
          enabled:
            node_type: setting
            type: boolean
            default: false
  synthetics:
    node_type: section
    title: 'Synthetics Configuration          '
    type: object
    visibility: public
    description: Enter specific configuration for Synthetics tests.
    tags:
    - template_section:CoreAgent
    - full-agent-only:true
    properties:
      collector:
        node_type: section
        type: object
        visibility: public
        description: Configuration related to run Synthetics tests.
        tags:
        - template_section:CoreAgent
        properties:
          enabled:
            node_type: setting
            type: boolean
            default: false
            visibility: public
            description: '[Preview] Enables Synthetics tests.'
            comment: Synthetics configuration
          workers:
            node_type: setting
            type: integer
            default: 4
            visibility: public
            description: The `workers` refers to the number of concurrent workers
              available for synthetics tests execution.
          flush_interval:
            node_type: setting
            type: string
            default: 10s
            visibility: public
            description: The `flush_interval` refers to the synthetics run interval
              for tests execution.
      forwarder:
        node_type: section
        type: object
        properties:
          additional_endpoints:
            node_type: setting
            type: array
            default: []
            items:
              type: object
          batch_max_concurrent_send:
            node_type: setting
            type: integer
            default: 0
          batch_max_content_size:
            node_type: setting
            type: integer
            default: 5000000
          batch_max_size:
            node_type: setting
            type: integer
            default: 1000
          batch_wait:
            node_type: setting
            type: number
            default: 5
            tags:
            - golang_type:float64
          compression_kind:
            node_type: setting
            type: string
            default: zstd
          compression_level:
            node_type: setting
            type: integer
            default: 6
          connection_reset_interval:
            node_type: setting
            type: integer
            default: 0
          dd_url:
            node_type: setting
            type: string
            default: ''
          dev_mode_no_ssl:
            node_type: setting
            type: boolean
            default: false
            tags:
            - no-env
          input_chan_size:
            node_type: setting
            type: integer
            default: 100
          logs_dd_url:
            node_type: setting
            type: string
            default: ''
          logs_no_ssl:
            node_type: setting
            type: boolean
            default: false
          sender_backoff_base:
            node_type: setting
            type: number
            default: 1
            tags:
            - golang_type:float64
          sender_backoff_factor:
            node_type: setting
            type: number
            default: 2
            tags:
            - golang_type:float64
          sender_backoff_max:
            node_type: setting
            type: number
            default: 120
            tags:
            - golang_type:float64
          sender_recovery_interval:
            node_type: setting
            type: integer
            default: 2
          sender_recovery_reset:
            node_type: setting
            type: boolean
            default: false
          use_compression:
            node_type: setting
            type: boolean
            default: true
          use_v2_api:
            node_type: setting
            type: boolean
            default: true
          zstd_compression_level:
            node_type: setting
            type: integer
            default: 1
  compliance_config:
    $ref: compliance_config.yaml
  sbom:
    $ref: sbom.yaml
  use_dogstatsd:
    node_type: setting
    title: DogStatsD Configuration
    type: boolean
    default: true
    visibility: public
    description: Set this option to false to disable the Agent DogStatsD server.
    tags:
    - template_section:Dogstatsd
  dogstatsd_port:
    node_type: setting
    type: integer
    default: 8125
    visibility: public
    description: |-
      Override the Agent DogStatsD port.
      Note: Make sure your client is sending to the same UDP port.
    tags:
    - template_section:Dogstatsd
    comment: 'Notice: 0 means UDP port closed'
  bind_host:
    node_type: setting
    type: string
    default: ''
    visibility: public
    description: |-
      The host to listen on for Dogstatsd and traces. This is ignored by APM when
      `apm_config.apm_non_local_traffic` is enabled and ignored by DogStatsD when `dogstatsd_non_local_traffic`
      is enabled. The trace-agent uses this host to send metrics to.
      The `localhost` default value is invalid in IPv6 environments where dogstatsd listens on "::1".
      To solve this problem, ensure Dogstatsd is listening on IPv4 by setting this value to "127.0.0.1".
    example: localhost
    tags:
    - template_section:Dogstatsd
    comment: statsd
  dogstatsd_socket:
    node_type: setting
    type: string
    visibility: public
    description: |-
      Listen for Dogstatsd metrics on a Unix domain socket (*nix only).
      Set to a valid and existing filesystem path to enable.
      Set to "" to disable this feature.

      Please note that UDS receiver is not available in Windows.
    tags:
    - template_section:Dogstatsd
    platform_default:
      linux: /var/run/datadog/dsd.socket
      aix: /var/run/datadog/dsd.socket
      other: ''
  dogstatsd_stream_socket:
    node_type: setting
    type: string
    default: ''
    visibility: public
    description: |-
      Listen for Dogstatsd metrics on a Unix domain socket using stream mode (SOCK_STREAM, *nix only).
      Set to a valid and existing filesystem path to enable.
      Set to "" to disable this feature.

      Please note that this is not available in Windows.
    tags:
    - template_section:Dogstatsd
    comment: 'Experimental || Notice: empty means feature disabled'
  dogstatsd_origin_detection:
    node_type: setting
    type: boolean
    default: false
    visibility: public
    description: |-
      When using Unix Socket, DogStatsD can tag metrics with container metadata.
      If running DogStatsD in a container, host PID mode (e.g. with --pid=host) is required.
    tags:
    - template_section:Dogstatsd
    comment: Only supported for socket traffic
  dogstatsd_origin_detection_client:
    node_type: setting
    type: boolean
    default: false
    visibility: public
    description: |-
      Whether the Agent should use a client-provided container ID to enrich the metrics, events and service checks with container tags.
      Note: This requires using a client compatible with DogStatsD protocol version 1.2.
    tags:
    - template_section:Dogstatsd
  dogstatsd_buffer_size:
    node_type: setting
    type: integer
    default: 8192
    visibility: public
    description: The buffer size use to receive statsd packets, in bytes.
    tags:
    - template_section:Dogstatsd
    comment: |-
      The following options allow to configure how the dogstatsd intake buffers and queues incoming datagrams.
      When a datagram is received it is first added to a datagrams buffer. This buffer fills up until
      we reach `dogstatsd_packet_buffer_size` datagrams or after `dogstatsd_packet_buffer_flush_timeout` ms.
      After this happens we flush this buffer of datagrams to a queue for processing. The size of this queue
      is `dogstatsd_queue_size`.
  dogstatsd_non_local_traffic:
    node_type: setting
    type: boolean
    default: false
    visibility: public
    description: Set to true to make DogStatsD listen to non local UDP traffic.
    tags:
    - template_section:Dogstatsd
  dogstatsd_stats_enable:
    node_type: setting
    type: boolean
    default: false
    visibility: public
    description: Publish DogStatsD's internal stats as Go expvars.
    tags:
    - template_section:Dogstatsd
  dogstatsd_logging_enabled:
    node_type: setting
    type: boolean
    default: true
    visibility: public
    description: |-
      Set to true to write DogstatsD metrics received by the Agent to dogstats_stats log files.
      Requires `dogstatsd_stats_enable: true`.
    tags:
    - template_section:Dogstatsd
  dogstatsd_log_file_max_size:
    node_type: setting
    type: string
    default: 10Mb
    visibility: public
    description: |-
      Maximum size of dogstatsd log file. Use either a size (for example, 10MB) or
      provide value in bytes (for example, 10485760.)
    example: 10MB
    tags:
    - template_section:Dogstatsd
  dogstatsd_queue_size:
    node_type: setting
    type: integer
    default: 1024
    visibility: public
    description: |-
      Configure the internal queue size of the Dogstatsd server.
      Reducing the size of this queue will reduce the maximum memory usage of the
      Dogstatsd server but as a trade-off, it could increase the number of packet drops.
    tags:
    - template_section:Dogstatsd
  dogstatsd_stats_buffer:
    node_type: setting
    type: integer
    default: 10
    visibility: public
    description: Set how many items should be in the DogStatsD's stats circular buffer.
    tags:
    - template_section:Dogstatsd
  dogstatsd_stats_port:
    node_type: setting
    type: integer
    default: 5000
    visibility: public
    description: The port for the go_expvar server.
    tags:
    - template_section:Dogstatsd
  dogstatsd_so_rcvbuf:
    node_type: setting
    type: integer
    default: 0
    visibility: public
    description: |-
      The number of bytes allocated to DogStatsD's socket receive buffer (POSIX system only).
      By default, the system sets this value. If you need to increase the size of this buffer
      but keep the OS default value the same, you can set DogStatsD's receive buffer size here.
      The maximum accepted value might change depending on the OS.
    tags:
    - template_section:Dogstatsd
  dogstatsd_metrics_stats_enable:
    node_type: setting
    type: boolean
    default: false
    visibility: public
    description: |-
      Set this parameter to true to have DogStatsD collects basic statistics (count/last seen)
      about the metrics it processed. Use the Agent command "dogstatsd-stats" to visualize
      those statistics.
    tags:
    - template_section:Dogstatsd
  dogstatsd_tags:
    node_type: setting
    type: array
    default: []
    items:
      type: string
    visibility: public
    description: |-
      Additional tags to append to all metrics, events and service checks received by
      this DogStatsD server.
    example: |2-

        - <TAG_KEY>:<TAG_VALUE>
    tags:
    - template_section:Dogstatsd
  dogstatsd_mapper_profiles:
    node_type: setting
    type: array
    default: []
    env_parser: json
    visibility: public
    description: |-
      The profiles will be used to convert parts of metrics names into tags.
      If a profile prefix is matched, other profiles won't be tried even if that profile matching rules doesn't match.
      The profiles and matching rules are processed in the order defined in this configuration.

      For each profile, following fields are available:
         name (required): profile name
         prefix (required): mapping only applies to metrics with the prefix. If set to `*`, it will match everything.
         mappings: mapping rules, see below.
      For each mapping, following fields are available:
         match (required): pattern for matching the incoming metric name e.g. `test.job.duration.*`
         match_type (optional): pattern type can be `wildcard` (default) or `regex` e.g. `test\.job\.(\w+)\.(.*)`
         name (required): the metric name the metric should be mapped to e.g. `test.job.duration`
         tags (optional): list of key:value pair of tag key and tag value
           The value can use $1, $2, etc, that will be replaced by the corresponding element capture by `match` pattern
           This alternative syntax can also be used: ${1}, ${2}, etc
    example: |2-

        - name: <PROFILE_NAME>                        # e.g. "airflow", "consul", "some_database"
          prefix: <PROFILE_PREFIX>                    # e.g. "airflow.", "consul.", "some_database."
          mappings:
            - match: <METRIC_TO_MATCH>                # e.g. `test.job.duration.*` to match `test.job.duration.my_job_name`
              match_type: <MATCH_TYPE>                # e.g. `wildcard` or `regex`
              name: <MAPPED_METRIC_NAME>              # e.g. `test.job.duration`
              tags:
                <TAG_KEY>: <TAG_VALUE_TO_EXPAND>      # e.g. `job_name: "$1"`, $1 is replaced by value capture by *
            - match: 'test.worker.*.*.start_time'     # to match `test.worker.<worker_type>.<worker_name>.start_time`
              name: 'test.worker.start_time'
              tags:
                worker_type: '$1'
                worker_name: '$2'
            - match: 'test\.task\.duration\.(\w+)\.(.*)'     # no need to escape in yaml context using single quote
              match_type: regex
              name: 'test.task'
              tags:
                task_type: '$1'
                task_name: '$2'
    tags:
    - template_section:Dogstatsd
  dogstatsd_mapper_cache_size:
    node_type: setting
    type: integer
    default: 1000
    visibility: public
    description: Size of the cache (max number of mapping results) used by Dogstatsd
      mapping feature.
    tags:
    - template_section:Dogstatsd
  dogstatsd_entity_id_precedence:
    node_type: setting
    type: boolean
    default: false
    visibility: public
    description: Disable enriching Dogstatsd metrics with tags from "origin detection"
      when Entity-ID is set.
    tags:
    - template_section:Dogstatsd
    comment: Enable check for Entity-ID presence when enriching Dogstatsd metrics
      with tags
  dogstatsd_no_aggregation_pipeline:
    node_type: setting
    type: boolean
    default: true
    visibility: public
    description: |-
      Enable the no-aggregation pipeline in DogStatsD: a pipeline receiving metrics
      with timestamp and forwarding them to the intake without extra processing except
      for tagging.
    tags:
    - template_section:Dogstatsd
    comment: Enable the no-aggregation pipeline.
  dogstatsd_no_aggregation_pipeline_batch_size:
    node_type: setting
    type: integer
    default: 2048
    visibility: public
    description: How many metrics maximum in payloads sent by the no-aggregation pipeline
      to the intake.
    tags:
    - template_section:Dogstatsd
    comment: How many metrics maximum in payloads sent by the no-aggregation pipeline
      to the intake.
  dogstatsd_no_aggregation_pipeline_workers_count:
    node_type: setting
    type: integer
    default: 1
    visibility: public
    description: How many workers are used by the no-aggregation pipeline.
    tags:
    - template_section:Dogstatsd
    comment: How many workers are used by the no-aggregation pipeline.
  metric_lookback:
    node_type: section
    type: object
    visibility: public
    description: |-
      Configure the local metric lookback rings. The first supported DogStatsD use
      case captures selected normal DogStatsD bucketed points/sketches and final
      no-aggregation points by exact name. An optional monitor can forward retained
      high-resolution ranges after a watched metric breaches its configured
      short-window max-minus-min range threshold.
    tags:
    - template_section:Dogstatsd
    - full-agent-only:true
    properties:
      enabled:
        node_type: setting
        type: boolean
        default: false
        visibility: public
        description: |-
          Enable metric lookback globally. For shadow checks, this enables shadowing for checks allowed
          by enabled_checks.
        tags:
        - full-agent-only:true
      enabled_checks:
        node_type: setting
        type: array
        default: []
        items:
          type: string
        visibility: public
        description: |-
          Optional check-name allowlist for metric lookback shadow checks. When empty, all supported
          checks are eligible.
        tags:
        - full-agent-only:true
      capacity:
        node_type: setting
        type: integer
        default: 262144
        visibility: public
        description: |-
          Total number of records retained across each lookback ring's shards. Series points and
          sketches use separate rings.
      shard_count:
        node_type: setting
        type: integer
        default: 16
        visibility: public
        description: Number of independent shards used by each lookback ring.
      dogstatsd:
        node_type: section
        type: object
        visibility: public
        description: Configure exact-name DogStatsD admission into metric lookback.
        tags:
        - template_section:Dogstatsd
        properties:
          metric_names:
            node_type: setting
            type: array
            default: []
            items:
              type: string
            visibility: public
            description: |-
              Additional exact DogStatsD metric names to retain in the lookback ring. The monitor metric is
              auto-admitted from DogStatsD when monitor.mode is dry_run or enabled and does not need to be repeated here.
      monitor:
        node_type: section
        type: object
        visibility: public
        description: Configure a metric lookback monitor for egress.
        tags:
        - template_section:Dogstatsd
        properties:
          mode:
            node_type: setting
            type: string
            default: disabled
            visibility: public
            description: |-
              Controls monitor operation. Valid values are:
                - disabled: do not run the monitor or monitor-driven egress.
                - dry_run: run the monitor, log state transitions, and keep retained ranges eligible for intake forwarding.
                - enabled: run the monitor and let monitor decisions control egress.
          metric_name:
            node_type: setting
            type: string
            default: ''
            visibility: public
            description: Exact metric name watched by the monitor.
          evaluation_interval:
            node_type: setting
            type: string
            default: 30s
            format: duration
            visibility: public
            description: |-
              Approximate width of each monitor evaluation window. Shorter windows can detect
              breaches sooner; longer windows evaluate more retained points together.
            tags:
            - golang_type:duration
          range_epsilon:
            node_type: setting
            type: number
            default: 0
            visibility: public
            description: |-
              Monitor max-minus-min threshold. The Agent fails to start when this value is negative.
              The monitor computes a window range as the maximum retained point value minus the minimum
              retained point value in each completed evaluation window, or in each configured tag partition.
              Egress forwards retained ranges after that window range is greater than this epsilon.
            tags:
            - golang_type:float64
          partition_tags:
            node_type: setting
            type: array
            default: []
            items:
              type: string
            visibility: public
            description: |-
              Tag keys used to partition monitor range evaluation. When empty, all retained points for the
              monitor metric are evaluated together. When set, the monitor evaluates each selected tag-value
              tuple independently and breaches if any partition exceeds range_epsilon.
      egress:
        node_type: section
        type: object
        visibility: public
        description: Configure monitor-triggered egress ranges.
        tags:
        - template_section:Dogstatsd
        properties:
          pre_trigger_window:
            node_type: setting
            type: string
            default: 0s
            format: duration
            visibility: public
            description: |-
              Extra retained time to forward before a breach or unknown monitor window.
              This captures context before the monitor-triggering window.
            tags:
            - golang_type:duration
          post_recovery_window:
            node_type: setting
            type: string
            default: 30s
            format: duration
            visibility: public
            description: |-
              Extra retained time to forward after the first healthy monitor window that
              suppresses egress. The default approximates the previous two-healthy-window behavior.
            tags:
            - golang_type:duration
      collection_interval:
        node_type: setting
        type: string
        default: 1s
        format: duration
        tags:
        - golang_type:duration
        - full-agent-only:true
  statsd_forward_host:
    node_type: setting
    type: string
    default: ''
    visibility: public
    description: |-
      Forward every packet received by the DogStatsD server to another statsd server.
      WARNING: Make sure that forwarded packets are regular statsd packets and not "DogStatsD" packets,
      as your other statsd server might not be able to handle them.
    tags:
    - template_section:Dogstatsd
  statsd_forward_port:
    node_type: setting
    type: integer
    default: 0
    visibility: public
    description: Port or the "statsd_forward_host" to forward StatsD packet to.
    tags:
    - template_section:Dogstatsd
  statsd_metric_namespace:
    node_type: setting
    type: string
    default: ''
    visibility: public
    description: |-
      Set a namespace for all StatsD metrics coming from this host.
      Each metric received is prefixed with the namespace before it's sent to Datadog.
    tags:
    - template_section:Dogstatsd
  metadata_providers:
    node_type: setting
    type: array
    default: []
    items:
      type: object
    visibility: public
    description: |-
      Metadata providers, add or remove from the list to enable or disable collection.
      Intervals are expressed in seconds. You can also set a provider's interval to 0
      to disable it.
    example: |2-

        - name: k8s
          interval: 60
    tags:
    - no-env
    - template_section:Agent
    comment: |-
      Declare other keys that don't have a default/env var.
      Mostly, keys we use IsSet() on, because IsSet always returns true if a key has a default.
  jmx_custom_jars:
    node_type: setting
    title: JMX Configuration
    type: array
    default: []
    items:
      type: string
    visibility: public
    description: |-
      If you only run Autodiscovery tests, jmxfetch might fail to pick up custom_jar_paths
      set in the check templates. If that is the case, force custom jars here.
    example: |2-

        - /jmx-jars/jboss-cli-client.jar
    tags:
    - template_section:CoreAgent
    - full-agent-only:true
    comment: JMXFetch
  jmx_use_cgroup_memory_limit:
    node_type: setting
    type: boolean
    default: false
    visibility: public
    description: |-
      When running in a memory cgroup, openjdk 8u131 and higher can automatically adjust
      its heap memory usage in accordance to the cgroup/container's memory limit.
      The Agent set a Xmx of 200MB if none is configured.
      Note: OpenJDK version < 8u131 or >= 10 as well as other JVMs might fail
      to start if this option is set.
    tags:
    - template_section:CoreAgent
    - full-agent-only:true
  jmx_use_container_support:
    node_type: setting
    type: boolean
    default: false
    visibility: public
    description: |-
      When running in a container, openjdk 10 and higher can automatically detect
      container specific configuration instead of querying the operating system
      to adjust resources allotted to the JVM.
      Note: openjdk versions prior to 10 and other JVMs might fail to start if
      this option is set.
    tags:
    - template_section:CoreAgent
    - full-agent-only:true
  jmx_max_ram_percentage:
    node_type: setting
    type: number
    default: 25
    visibility: public
    description: |-
      When running in a container with jmx_use_container_support enabled, the JVM can
      automatically declare the maximum heap size based off of a percentage of
      total container allocated memory. This option is overwritten if
      you use -Xmx to manually define the size of the heap. This option applies
      to containers with a total memory limit greater than ~250mb. If
      jmx_use_container_support is disabled this option has no effect.
    tags:
    - golang_type:float64
    - template_section:CoreAgent
    - full-agent-only:true
  jmx_log_file:
    node_type: setting
    type: string
    default: ${log_path}/jmxfetch.log
    visibility: public
    description: Path of the log file where JMXFetch logs are written.
    tags:
    - template_section:CoreAgent
  jmx_max_restarts:
    node_type: setting
    type: integer
    default: 3
    visibility: public
    description: Number of JMX restarts allowed in the restart-interval before giving
      up.
    tags:
    - golang_type:int64
    - template_section:CoreAgent
    - full-agent-only:true
  jmx_restart_interval:
    node_type: setting
    type: integer
    default: 5
    visibility: public
    description: Duration of the restart interval in seconds.
    tags:
    - golang_type:int64
    - template_section:CoreAgent
    - full-agent-only:true
  jmx_check_period:
    node_type: setting
    type: integer
    default: 15000
    visibility: public
    description: Duration of the period for check collections in milliseconds.
    tags:
    - template_section:CoreAgent
    - full-agent-only:true
  jmx_thread_pool_size:
    node_type: setting
    type: integer
    default: 3
    visibility: public
    description: |-
      JMXFetch collects multiples instances concurrently. Defines the maximum level of concurrency:
        * Higher concurrency increases CPU utilization during metric collection.
        * Lower concurrency results in lower CPU usage but may increase the total collection time.
      A value of 1 processes instances serially.
    tags:
    - template_section:CoreAgent
    - full-agent-only:true
  jmx_collection_timeout:
    node_type: setting
    type: integer
    default: 60
    visibility: public
    description: Defines the maximum waiting period in seconds before timing up on
      metric collection.
    tags:
    - template_section:CoreAgent
    - full-agent-only:true
  jmx_reconnection_thread_pool_size:
    node_type: setting
    type: integer
    default: 3
    visibility: public
    description: |-
      JMXFetch reconnects to multiples instances concurrently. Defines the maximum level of concurrency:
        * Higher concurrency increases CPU utilization during reconnection.
        * Lower concurrency results in lower CPU usage but may increase the total reconnection time
      A value of 1 processes instance reconnections serially.
    tags:
    - template_section:CoreAgent
    - full-agent-only:true
  jmx_reconnection_timeout:
    node_type: setting
    type: integer
    default: 60
    visibility: public
    description: Determines the maximum waiting period in seconds before timing up
      on instance reconnection.
    tags:
    - template_section:CoreAgent
    - full-agent-only:true
  jmx_statsd_telemetry_enabled:
    node_type: setting
    type: boolean
    default: false
    visibility: public
    description: Specifies whether the JMXFetch statsd client telemetry is enabled.
    tags:
    - template_section:CoreAgent
    - full-agent-only:true
  jmx_telemetry_enabled:
    node_type: setting
    type: boolean
    default: false
    visibility: public
    description: Specifies whether additional JMXFetch telemetry is enabled.
    tags:
    - template_section:CoreAgent
    - full-agent-only:true
  jmx_java_tool_options:
    node_type: setting
    type: string
    default: ''
    visibility: public
    description: |-
      If you only run Autodiscovery tests, jmxfetch might fail to pick up custom_jar_paths
      set in the check templates. If that is the case, force custom jars here.
    example: -javaagent:/path/to/agent.jar -XX:+UseG1GC
    tags:
    - template_section:CoreAgent
    - full-agent-only:true
  log_level:
    node_type: setting
    title: Logging Configuration
    type: string
    default: info
    visibility: public
    description: |-
      Minimum log level of the Datadog Agent.
      Valid log levels are: trace, debug, info, warn, error, critical, and off.
      Note: When using the 'off' log level, quotes are mandatory.
    tags:
    - template_section:Logging
  log_file:
    node_type: setting
    type: string
    default: ${log_path}/agent.log
    visibility: public
    description: |-
      Path of the log file for the Datadog Agent.
      See https://docs.datadoghq.com/agent/guide/agent-log-files/
    tags:
    - template_section:Logging
  log_format_json:
    node_type: setting
    type: boolean
    default: false
    visibility: public
    description: Set to 'true' to output Agent logs in JSON format.
    tags:
    - template_section:Logging
    comment: Use to output logs in JSON format
  log_to_console:
    node_type: setting
    type: boolean
    default: true
    visibility: public
    description: Set to 'false' to disable Agent logging to stdout.
    tags:
    - template_section:Logging
  disable_file_logging:
    node_type: setting
    type: boolean
    default: false
    visibility: public
    description: Set to 'true' to disable logging to the log file.
    tags:
    - template_section:Logging
  log_file_max_size:
    node_type: setting
    type: string
    default: 10Mb
    visibility: public
    description: |-
      Maximum size of one log file. Use either a size (e.g. 10MB) or
      provide value in bytes: 10485760
    example: 10MB
    tags:
    - template_section:Logging
  log_file_max_rolls:
    node_type: setting
    type: integer
    default: 1
    visibility: public
    description: |-
      Maximum amount of "old" log files to keep.
      Set to 0 to not limit the number of files to create.
    tags:
    - template_section:Logging
  log_to_syslog:
    node_type: setting
    type: boolean
    default: false
    visibility: public
    description: |-
      Set to 'true' to enable logging to syslog.
      Note: Even if this option is set to 'false', the service launcher of your environment
      may redirect the Agent process' stdout/stderr to syslog. In that case, if you wish
      to disable logging to syslog entirely, set 'log_to_console' to 'false' as well.
    tags:
    - template_section:Logging
  syslog_uri:
    node_type: setting
    type: string
    default: ''
    visibility: public
    description: |-
      Define a custom remote syslog uri if needed. If 'syslog_uri' is left undefined/empty,
      a local domain socket connection is attempted.
    example: <SYSLOG_URI>
    tags:
    - template_section:Logging
  syslog_rfc:
    node_type: setting
    type: boolean
    default: false
    visibility: public
    description: Set to 'true' to output in an RFC 5424-compliant format for Agent
      logs.
    tags:
    - template_section:Logging
  log_format_rfc3339:
    node_type: setting
    type: boolean
    default: false
    visibility: public
    description: If enabled the Agent will log using the RFC3339 format for the log
      time.
    tags:
    - template_section:Logging
  log_all_goroutines_when_unhealthy:
    node_type: setting
    type: boolean
    default: false
    visibility: public
    description: |-
      If enabled, when the health probe of an internal component fails, the stack traces
      of all the goroutines are logged.
    tags:
    - template_section:Logging
  autoconf_template_dir:
    node_type: setting
    title: Autoconfig Configuration
    type: string
    default: /datadog/check_configs
    visibility: public
    description: Directory containing configuration templates for Autoconfig.
    tags:
    - template_section:CoreAgent
    comment: Where to look for check templates if no custom path is defined
  autoconf_config_files_poll:
    node_type: setting
    type: boolean
    default: false
    visibility: public
    description: |-
      Should the we check for new/updated integration configuration files on disk.
      WARNING: Only files containing checks configuration are supported (logs configuration are not supported).
    tags:
    - template_section:CoreAgent
  autoconf_config_files_poll_interval:
    node_type: setting
    type: integer
    default: 60
    visibility: public
    description: |-
      How frequently should the Agent check for new/updated integration configuration files (in seconds).
      This value must be >= 1 (i.e. 1 second).
      WARNING: Only files containing checks configuration are supported (logs configuration are not supported).
    tags:
    - template_section:CoreAgent
  config_providers:
    node_type: setting
    type: array
    default: []
    items:
      type: object
    visibility: public
    description: |-
      The providers the Agent should call to collect checks configurations. Available providers are:
        * kubelet - The kubelet provider handles templates embedded in pod annotations.
        * docker -  The Docker provider handles templates embedded in container labels.
        * clusterchecks - The clustercheck provider retrieves cluster-level check configurations from the cluster-agent.
        * kube_services - The kube_services provider watches Kubernetes services for cluster-checks

      See https://docs.datadoghq.com/guides/autodiscovery/ to learn more
    example: |2-

        - name: kubelet
          polling: true
        - name: docker
          polling: true
        - name: clusterchecks
          grace_time_seconds: 60
        - name: kube_services     # only when using the cluster Agent
          polling: true
        - name: etcd
          polling: true
          template_dir: /datadog/check_configs
          template_url: http://127.0.0.1
          username:
          password:
        - name: consul
          polling: true
          template_dir: datadog/check_configs
          template_url: http://127.0.0.1
          ca_file:
          ca_path:
          cert_file:
          key_file:
          username:
          password:
          token:
        - name: zookeeper
          polling: true
          template_dir: /datadog/check_configs
          template_url: 127.0.0.1
          username:
          password:
    tags:
    - no-env
    - template_section:CoreAgent
  extra_config_providers:
    node_type: setting
    type: array
    default: []
    items:
      type: string
    visibility: public
    description: |-
      Add additional config providers by name using their default settings, and pooling enabled.
      This list is available as an environment variable binding.
    example: |2-

        - clusterchecks
    tags:
    - template_section:CoreAgent
  autoconfig_exclude_features:
    node_type: setting
    type: array
    default: []
    items:
      type: string
    visibility: public
    description: |-
      Exclude features automatically detected and enabled by environment autodiscovery.
      Supported syntax is a list of `(<attribute>:)<regexp>`. Currently only the `name` attribute is supported.
      When no attribute is present, it defaults to `name:` attribute.
    example: |2-

        - cloudfoundry
        - containerd
        - cri
        - docker
        - ecsec2
        - ecsfargate
        - eksfargate
        - kubernetes
        - orchestratorexplorer
        - podman
        - process
    tags:
    - template_section:CoreAgent
  autoconfig_include_features:
    node_type: setting
    type: array
    default: []
    items:
      type: string
    visibility: public
    description: Force activation of features (as if they were discovered by environment
      autodiscovery).
    example: |2-

        - cloudfoundry
        - containerd
        - cri
        - docker
        - ecsec2
        - ecsfargate
        - eksfargate
        - kubernetes
        - orchestratorexplorer
        - podman
        - process
    tags:
    - template_section:CoreAgent
  container_cgroup_root:
    node_type: setting
    title: Container Autodiscovery Configuration
    type: string
    default: /host/sys/fs/cgroup/
    visibility: public
    description: |-
      Change the root directory to look at to get cgroup statistics.
      Default if environment variable "DOCKER_DD_AGENT" is set to "/host/sys/fs/cgroup"
      and "/sys/fs/cgroup" if not.
    tags:
    - template_section:CoreAgent
    comment: |-
      The correct default is deduce at runtime by scanning for mounted volumes (see fixupContainerSyspath).
      The value here is a generic place holder used for our configuration examples.
  container_proc_root:
    node_type: setting
    type: string
    default: /host/proc
    visibility: public
    description: |-
      Change the root directory to look at to get proc statistics.
      Default if environment variable "DOCKER_DD_AGENT" is set "/host/proc" and "/proc" if not.
    tags:
    - template_section:CoreAgent
    comment: |-
      The correct default is deduce at runtime by scanning for mounted volumes (see fixupContainerSyspath).
      The value here is a generic place holder used for our configuration examples.
  listeners:
    node_type: setting
    type: array
    default: []
    items:
      type: object
    visibility: public
    description: |-
      Choose "auto" if you want to let the Agent find any relevant listener on your host
      At the moment, the only auto listener supported is Docker
      If you have already set Docker anywhere in the listeners, the auto listener is ignored
    example: |2-

        - name: auto
        - name: docker
    tags:
    - no-env
    - template_section:CoreAgent
  extra_listeners:
    node_type: setting
    type: array
    default: []
    items:
      type: string
    visibility: public
    description: |-
      You can also add additional listeners by name using their default settings.
      This list is available as an environment variable binding.
    example: |2-

        - kubelet
    tags:
    - template_section:CoreAgent
  ac_exclude:
    node_type: setting
    type: array
    default: []
    items:
      type: string
    visibility: public
    description: |-
      Exclude containers from metrics and AD based on their name or image.
      If a container matches an exclude rule, it won't be included unless it first matches an include rule.
      An excluded container won't get any individual container metric reported for it.
      See: https://docs.datadoghq.com/agent/guide/autodiscovery-management/
    tags:
    - template_section:CoreAgent
  ac_include:
    node_type: setting
    type: array
    default: []
    items:
      type: string
    visibility: public
    description: |-
      Include containers from metrics and AD based on their name or image:
      See: https://docs.datadoghq.com/agent/guide/autodiscovery-management/
    tags:
    - template_section:CoreAgent
  exclude_pause_container:
    node_type: setting
    type: boolean
    default: true
    visibility: public
    description: |-
      Exclude default pause containers from orchestrators.
      By default the Agent doesn't monitor kubernetes/openshift pause container.
      They are still counted in the container count (just like excluded containers).
    tags:
    - template_section:CoreAgent
  docker_query_timeout:
    node_type: setting
    type: integer
    default: 5
    visibility: public
    description: Set the default timeout value when connecting to the Docker daemon.
    tags:
    - golang_type:int64
    - template_section:CoreAgent
    - full-agent-only:true
    comment: Docker
  ad_config_poll_interval:
    node_type: setting
    type: integer
    default: 10
    visibility: public
    description: |-
      The default interval in second to check for new autodiscovery configurations
      on all registered configuration providers.
    tags:
    - golang_type:int64
    - template_section:CoreAgent
    comment: in seconds
  ad_tag_completeness_max_wait:
    node_type: setting
    type: integer
    default: 0
    visibility: public
    description: |-
      Maximum time in seconds that autodiscovery waits for an entity's tags to be
      complete before scheduling checks for it. This avoids checks running briefly
      with incomplete tags. This can happen when some sources (kubelet, container
      runtime, etc.) have reported information for the entity, but others have not
      yet. 0 disables waiting and checks are scheduled as soon as the entity is
      discovered.
    tags:
    - template_section:CoreAgent
    comment: in seconds, 0 means disabled
  ad_allowed_env_vars:
    node_type: setting
    type: array
    default: []
    items:
      type: string
    visibility: public
    description: |-
      The list of environment variables that are allowed to be resolved in check
      configurations.
      If the list is not set or is empty, the default behavior applies: all envs
      are allowed.
      This list only applies when `ad_disable_env_var_resolution` is set to false.
    example: |2-

        - <ENV_VAR_1>
        - <ENV_VAR_2>
    tags:
    - template_section:CoreAgent
  ad_disable_env_var_resolution:
    node_type: setting
    type: boolean
    default: false
    visibility: public
    description: Disable environment variable resolution in check configurations.
    tags:
    - template_section:CoreAgent
  cloud_foundry_garden:
    node_type: section
    type: object
    visibility: public
    description: Settings for Cloudfoundry application container autodiscovery.
    tags:
    - template_section:CoreAgent
    - full-agent-only:true
    properties:
      listen_network:
        node_type: setting
        type: string
        default: unix
        visibility: public
        description: The network on which the garden API is listening. Possible values
          are `unix` or `tcp`
        comment: Cloud Foundry Garden
      listen_address:
        node_type: setting
        type: string
        default: /var/vcap/data/garden/garden.sock
        visibility: public
        description: The address on which the garden API is listening.
  podman_db_path:
    node_type: setting
    type: string
    default: ''
    visibility: public
    description: |-
      Path(s) to Podman container database file(s) used by the Datadog Agent to collect container metrics.
      Accepts a comma-separated list of paths to support monitoring containers from multiple users
      (e.g. root and rootless users).
      Example: "/var/lib/containers/storage/db.sql,/home/myuser/.local/share/containers/storage/db.sql"
      When left empty, the Agent auto-discovers accessible Podman databases for root and all users under /home/.
    tags:
    - template_section:CoreAgent
  cluster_agent:
    $ref: cluster_agent.yaml
  cluster_checks:
    $ref: cluster_checks.yaml
  admission_controller:
    $ref: admission_controller.yaml
  docker_labels_as_tags:
    node_type: setting
    title: Docker tag extraction
    type: object
    default: {}
    additionalProperties:
      type: string
    visibility: public
    description: |-
      The Agent can extract container label values and set them as metric tags values associated to a <TAG_KEY>.
      If you prefix your tag name with `+`, it will only be added to high cardinality metrics (Docker check).

      Env var example: DD_DOCKER_LABELS_AS_TAGS='{"LABEL_NAME":"tag_key"}'
    example: |2-

        <LABEL_NAME>: <TAG_KEY>
        <HIGH_CARDINALITY_LABEL_NAME>: +<TAG_KEY>
    tags:
    - template_section:DockerTagging
    - full-agent-only:true
  docker_env_as_tags:
    node_type: setting
    type: object
    default: {}
    additionalProperties:
      type: string
    visibility: public
    description: |-
      The Agent can extract environment variables values and set them as metric tags values associated to a <TAG_KEY>.
      If you prefix your tag name with `+`, it will only be added to high cardinality metrics (Docker check).

      Env var example: DD_DOCKER_ENV_AS_TAGS='{"ENVVAR_NAME": "tag_key"}'
    example: |2-

        <ENVVAR_NAME>: <TAG_KEY>
    tags:
    - template_section:DockerTagging
    - full-agent-only:true
  kubernetes_pod_labels_as_tags:
    node_type: setting
    title: Kubernetes tag extraction
    type: object
    default: {}
    additionalProperties:
      type: string
    visibility: public
    description: |-
      The Agent can extract pod labels values and set them as metric tags values associated to a <TAG_KEY>.
      If you prefix your tag name with +, it will only be added to high cardinality metrics.

      Env var example: DD_KUBERNETES_POD_LABELS_AS_TAGS='{"LABEL_NAME":"tag_key"}'
    example: |2-

        <POD_LABEL>: <TAG_KEY>
        <HIGH_CARDINALITY_LABEL_NAME>: +<TAG_KEY>
    tags:
    - template_section:KubernetesTagging
    - full-agent-only:true
  kubernetes_pod_annotations_as_tags:
    node_type: setting
    type: object
    default: {}
    additionalProperties:
      type: string
    visibility: public
    description: |-
      The Agent can extract annotations values and set them as metric tags values associated to a <TAG_KEY>.
      If you prefix your tag name with +, it will only be added to high cardinality metrics.

      Env var example: DD_KUBERNETES_POD_ANNOTATIONS_AS_TAGS='{"ANNOTATION_NAME":"tag_key"}'
    example: |2-

        <ANNOTATION>: <TAG_KEY>
        <HIGH_CARDINALITY_ANNOTATION>: +<TAG_KEY>
    tags:
    - template_section:KubernetesTagging
    - full-agent-only:true
  kubernetes_namespace_labels_as_tags:
    node_type: setting
    type: object
    default: {}
    additionalProperties:
      type: string
    visibility: public
    description: |-
      The Agent can extract namespace label values and set them as metric tags values associated to a <TAG_KEY>.
      If you prefix your tag name with +, it will only be added to high cardinality metrics.

      Env var example: DD_KUBERNETES_NAMESPACE_LABELS_AS_TAGS='{"<NAMESPACE_LABEL>": "<TAG_KEY>"}'
    example: |2-

        <NAMESPACE_LABEL>: <TAG_KEY>
        <HIGH_CARDINALITY_NAMESPACE_LABEL_NAME>: +<TAG_KEY>
    tags:
    - template_section:KubernetesTagging
    - full-agent-only:true
  container_env_as_tags:
    node_type: setting
    type: object
    default: {}
    additionalProperties:
      type: string
    visibility: public
    description: |-
      The Agent can extract environment variable values and set them as metric tags values associated to a <TAG_KEY>.
      Requires the container runtime socket to be reachable. (Supported container runtimes: Containerd, Docker)
    example: |2-

        <ENV>: <TAG_KEY>
    tags:
    - template_section:KubernetesTagging
  container_labels_as_tags:
    node_type: setting
    type: object
    default: {}
    additionalProperties:
      type: string
    visibility: public
    description: |-
      The Agent can extract container label values and set them as metric tags values associated to a <TAG_KEY>.
      If you prefix your tag name with `+`, it will only be added to high cardinality metrics. (Supported container
      runtimes: Containerd, Docker).
    example: |2-

        <LABEL_NAME>: <TAG_KEY>
        <HIGH_CARDINALITY_LABEL_NAME>: +<TAG_KEY>
    tags:
    - template_section:KubernetesTagging
  ecs_agent_container_name:
    node_type: setting
    title: ECS integration Configuration
    type: string
    default: ecs-agent
    visibility: public
    description: |-
      The ECS Agent container should be autodetected when running with the
      default (ecs-agent) name. If not, change the container name here:
    tags:
    - template_section:ECS
    - full-agent-only:true
  ecs_agent_url:
    node_type: setting
    type: string
    default: ''
    visibility: public
    description: |-
      The ECS Agent container should be autodetected when running with the
      default (ecs-agent) name. If not, change the container name the
      Agent should look for with ecs_agent_container_name, or force a fixed url here:
    example: http://localhost:51678
    tags:
    - template_section:ECS
    - full-agent-only:true
    comment: |-
      ECS
      Will be autodetected
  ecs_collect_resource_tags_ec2:
    node_type: setting
    type: boolean
    default: false
    visibility: public
    description: |-
      The Agent can collect resource tags from the metadata API exposed by the
      ECS Agent for tasks scheduled with the EC2 launch type.
    tags:
    - template_section:ECS
    - full-agent-only:true
  ecs_resource_tags_replace_colon:
    node_type: setting
    type: boolean
    default: false
    visibility: public
    description: The Agent replaces colon `:` characters in the ECS resource tag keys
      by underscores `_`.
    tags:
    - template_section:ECS
    - full-agent-only:true
  ecs_metadata_timeout:
    node_type: setting
    type: integer
    default: 1000
    visibility: public
    description: Timeout in milliseconds on calls to the AWS ECS metadata endpoints.
    tags:
    - template_section:ECS
    - full-agent-only:true
    comment: value in milliseconds
  ecs_task_collection_enabled:
    node_type: setting
    type: boolean
    default: true
    visibility: public
    description: |-
      The Agent can collect detailed task information from the metadata API exposed by the ECS Agent,
      which is used for the orchestrator ECS check.
      When ``infrastructure_mode`` is ``none``, task collection is disabled unless overridden
      (for example set ``DD_ECS_TASK_COLLECTION_ENABLED`` to ``true``).
    tags:
    - template_section:ECS
    - full-agent-only:true
  ecs_deployment_mode:
    node_type: setting
    type: string
    default: auto
    visibility: public
    description: |-
      Controls how the agent collects ECS task metadata:
      - auto: Use daemon mode on EC2, sidecar mode on Fargate (recommended)
      - daemon: Collect all tasks on the host (requires v1 metadata API access)
      - sidecar: Collect only the current task (works on both EC2 and Fargate)

      Use 'sidecar' when running the agent as a task sidecar on EC2 to ensure
      it only reports on its own task, while still correctly identifying the
      launch type as EC2.
    tags:
    - template_section:ECS
    - full-agent-only:true
  cri_socket_path:
    node_type: setting
    title: CRI and Containerd integration Configuration
    type: string
    default: ''
    visibility: public
    description: |-
      This setting enabled both CRI and Containerd integration.

      To activate the CRI or Containerd check, indicate the path of the socket you're using
      and mount it in the container if needed.

      For containerd see: https://docs.datadoghq.com/integrations/containerd/
      For CRI see:: https://docs.datadoghq.com/integrations/cri/

      If left empty, the CRI and Containerd checks are disabled.
    tags:
    - template_section:CoreAgent
    comment: empty is disabled
  cri_connection_timeout:
    node_type: setting
    type: integer
    default: 1
    visibility: public
    description: Configure the initial connection timeout in seconds.
    tags:
    - golang_type:int64
    - template_section:CoreAgent
    comment: in seconds
  cri_query_timeout:
    node_type: setting
    type: integer
    default: 5
    visibility: public
    description: Configure the timeout in seconds for querying the CRI or Containerd
      API.
    tags:
    - golang_type:int64
    - template_section:CoreAgent
    comment: in seconds
  containerd_namespace:
    node_type: setting
    type: array
    default: []
    items:
      type: string
    visibility: public
    description: |-
      Deprecated - use `containerd_namespaces` instead

      Activating the Containerd check also activates the CRI check, as it contains an additional subset of useful metrics.
      Defaults to [] which configures the agent to report metrics and events from all the containerd namespaces.
      To watch specific namespaces, list them here.
      https://github.com/containerd/cri/blob/release/1.2/pkg/constants/constants.go#L22-L23
    example: |2-

        - k8s.io
    tags:
    - template_section:CoreAgent
  containerd_namespaces:
    node_type: setting
    type: array
    default: []
    items:
      type: string
    visibility: public
    description: |-
      Activating the Containerd check also activates the CRI check, as it contains an additional subset of useful metrics.
      Defaults to [] which configures the agent to report metrics and events from all the containerd namespaces.
      containerd_namespaces acts as an alias for containerd_namespace. When both containerd_namespaces and containerd_namespace
      are configured, the Agent merges the two lists.
    example: |2-

        - k8s.io
    tags:
    - template_section:CoreAgent
    comment: alias for containerd_namespace
  containerd_exclude_namespaces:
    node_type: setting
    type: array
    default:
    - moby
    items:
      type: string
    visibility: public
    description: |-
      When containerd_namespaces is set to [], containerd_exclude_namespaces
      allows the exclusion of containers from specific namespaces. By default it
      excludes "moby", to prevent Docker containers from being detected as
      containerd containers.
    tags:
    - template_section:CoreAgent
  kubernetes_kubelet_host:
    node_type: setting
    title: Kubernetes kubelet connectivity Configuration
    type: string
    default: ''
    visibility: public
    description: |-
      The kubelet host should be autodetected when running inside a pod.
      If you run into connectivity issues, set the host here according to your cluster setup.
    example: <KUBLET_HOST>
    tags:
    - template_section:Kubelet
  kubernetes_http_kubelet_port:
    node_type: setting
    type: integer
    default: 10255
    visibility: public
    description: |-
      The kubelet http port should be autodetected when running inside a pod.
      If you run into connectivity issues, set the http port here according to your cluster setup.
    tags:
    - template_section:Kubelet
  kubernetes_https_kubelet_port:
    node_type: setting
    type: integer
    default: 10250
    visibility: public
    description: |-
      The kubelet https port should be autodetected when running inside a pod.
      If you run into connectivity issues, set the https port here according to your cluster setup.
    tags:
    - template_section:Kubelet
  kubelet_tls_verify:
    node_type: setting
    type: boolean
    default: true
    visibility: public
    description: Set to false if you don't want the Agent to verify the kubelet's
      certificate when using HTTPS.
    tags:
    - template_section:Kubelet
  kubelet_client_ca:
    node_type: setting
    type: string
    default: ''
    visibility: public
    description: Kublet client CA file path.
    example: /var/run/secrets/kubernetes.io/serviceaccount/ca.crt
    tags:
    - template_section:Kubelet
  kubelet_auth_token_path:
    node_type: setting
    type: string
    default: ''
    visibility: public
    description: |-
      If authentication is needed, the Agent uses the pod's service account's
      credentials. If you want to use a different account, or are running the Agent
      on the host, set a custom token file path here.
    example: <TOKEN_FILE_PATH>
    tags:
    - template_section:Kubelet
  kubelet_client_crt:
    node_type: setting
    type: string
    default: ''
    visibility: public
    description: Set a custom Client CRT file path.
    example: <CRT_FILE_PATH>
    tags:
    - template_section:Kubelet
  kubelet_client_key:
    node_type: setting
    type: string
    default: ''
    visibility: public
    description: Set a custom Client key file path.
    example: <CLIENT_KEY_FILE_PATH>
    tags:
    - template_section:Kubelet
  kubelet_cache_pods_duration:
    node_type: setting
    type: integer
    default: 0
    visibility: public
    description: Polling frequency in seconds of the Agent to the kubelet "/pods"
      endpoint.
    tags:
    - template_section:Kubelet
    comment: |-
      Cache TTL for pod lists in the kubelet client. Set to 0 because it's only
      used by workloadmeta that already defines its own pull frequency and has
      its own storage, so no need for an extra cache.
  kubernetes_pod_expiration_duration:
    node_type: setting
    type: integer
    default: 900
    visibility: public
    description: |-
      Set the time in second after which the Agent ignores the pods that have exited.
      Set the duration to 0 to disable this filtering.
    tags:
    - template_section:Kubelet
    comment: in seconds, default 15 minutes
  kubernetes_kubeconfig_path:
    node_type: setting
    title: Kubernetes apiserver integration Configuration
    type: string
    default: ''
    visibility: public
    description: |-
      When running in a pod, the Agent automatically uses the pod's service account
      to authenticate with the API server.
      Provide the path to a custom KubeConfig file if you wish to install the Agent out of a pod
      or customize connection parameters.
      See https://kubernetes.io/docs/tasks/access-application-cluster/configure-access-multiple-clusters/
    tags:
    - template_section:KubeApiServer
    - full-agent-only:true
    comment: Kube ApiServer
  kubernetes_apiserver_ca_path:
    node_type: setting
    type: string
    default: ''
    visibility: public
    description: |-
      When running in a pod, the Agent automatically uses the pod's service account CA.
      Use this option to keep using the InCluster config but overriding the default CA Path.
      This parameter has no effect if `kubernetes_kubeconfig_path` is set.
    tags:
    - template_section:KubeApiServer
    - full-agent-only:true
  kubernetes_apiserver_tls_verify:
    node_type: setting
    type: boolean
    default: true
    visibility: public
    description: |-
      When running in a pod, the Agent automatically uses the pod's service account CA.
      Use this option to keep using the InCluster config but deactivating TLS verification (in case APIServer CA is not ServiceAccount CA)
      This parameter has no effect if `kubernetes_kubeconfig_path` is set.
    tags:
    - template_section:KubeApiServer
    - full-agent-only:true
  kubernetes_apiserver_use_protobuf:
    node_type: setting
    type: boolean
    default: false
    visibility: public
    description: |-
      By default, communication with the apiserver is in json format. Setting the following
      option to true allows communication in the binary protobuf format.
    tags:
    - template_section:KubeApiServer
  kubernetes_collect_metadata_tags:
    node_type: setting
    type: boolean
    default: true
    visibility: public
    description: |-
      Set this to false to disable tag collection for the Agent.
      Note: In order to collect Kubernetes service names, the Agent needs certain rights.
      See https://github.com/DataDog/datadog-agent/blob/main/Dockerfiles/agent/README.md#kubernetes
    tags:
    - template_section:KubeApiServer
  kubernetes_use_endpoint_slices:
    node_type: setting
    type: boolean
    default: false
    visibility: public
    description: |-
      Enable this to map Kubernetes services to EndpointSlices instead of Endpoints. (Requires Cluster Agent 7.62.0+).
      EndpointSlices are GA since 1.21. Kubernetes Endpoint API is depreceated in 1.33.
    tags:
    - template_section:KubeApiServer
  auto_team_tag_collection:
    node_type: setting
    type: boolean
    default: true
    visibility: public
    description: |-
      When enabled, the orchestrator check automatically collects the 'team' tag from Kubernetes resources.
      If a resource has a label or annotation with key 'team', and no 'team' tag has been explicitly configured
      via kubernetes_resources_labels_as_tags or kubernetes_resources_annotations_as_tags, the agent will
      automatically add a 'team' tag with the value from the label (preferred) or annotation.
    tags:
    - template_section:KubeApiServer
    - full-agent-only:true
  kubernetes_metadata_tag_update_freq:
    node_type: setting
    type: integer
    default: 60
    visibility: public
    description: Set how often in secons the Agent refreshes the internal mapping
      of services to ContainerIDs.
    tags:
    - template_section:KubeApiServer
    comment: Polling frequency of the Agent to the DCA in seconds (gets the local
      cache if the DCA is disabled)
  kubernetes_metadata_streaming:
    node_type: setting
    type: boolean
    default: true
    visibility: public
    description: |-
      Stream Kubernetes metadata from the Cluster Agent instead of polling it every
      `kubernetes_metadata_tag_update_freq` seconds. This propagates the associated
      tags with less delay.
    tags:
    - template_section:KubeApiServer
  kubernetes_apiserver_client_timeout:
    node_type: setting
    type: integer
    default: 10
    visibility: public
    description: Set the timeout for the Agent when connecting to the Kubernetes API
      server.
    tags:
    - template_section:KubeApiServer
  collect_kubernetes_events:
    node_type: setting
    type: boolean
    default: false
    visibility: public
    description: |-
      Set `collect_kubernetes_events` to true to enable collection of kubernetes
      events to be sent to Datadog.
      Note: leader election must be enabled below to collect events.
            Only the leader Agent collects events.
      See https://github.com/DataDog/datadog-agent/blob/main/Dockerfiles/agent/README.md#event-collection
    tags:
    - template_section:KubeApiServer
  kubernetes_event_collection_timeout:
    node_type: setting
    type: integer
    default: 100
    visibility: public
    description: Set the timeout between two successful event collections in milliseconds.
    tags:
    - template_section:KubeApiServer
    - full-agent-only:true
    comment: timeout between two successful event collections in milliseconds.
  leader_election:
    node_type: setting
    type: boolean
    default: false
    visibility: public
    description: |-
      Set the parameter to true to enable leader election on this node.
      See https://github.com/DataDog/datadog-agent/blob/main/Dockerfiles/agent/README.md#leader-election
    tags:
    - template_section:KubeApiServer
    - full-agent-only:true
  leader_lease_duration:
    node_type: setting
    type: string
    default: '60'
    visibility: public
    description: Set the leader election lease in seconds.
    tags:
    - template_section:KubeApiServer
    - full-agent-only:true
  kubernetes_node_labels_as_tags:
    node_type: setting
    type: object
    default: {}
    additionalProperties:
      type: string
    visibility: public
    description: |-
      Configure node labels that should be collected and their name as host tags.
      Note: Some of these labels are redundant with metadata collected by cloud provider crawlers (AWS, GCE, Azure)

      Env var example: DD_KUBERNETES_NODE_LABELS_AS_TAGS='{"NODE_LABEL": "TAG_KEY"}'
    example: |2-

        kubernetes.io/hostname: nodename
        beta.kubernetes.io/os: os
    tags:
    - template_section:KubeApiServer
    - full-agent-only:true
  kubernetes_node_annotations_as_tags:
    node_type: setting
    type: object
    default:
      cluster.k8s.io/machine: kube_machine
    additionalProperties:
      type: string
    visibility: public
    description: |-
      Configure node annotationss that should be collected and their name as host tags.

      Env var example: DD_KUBERNETES_NODE_ANNOTATIONS_AS_TAGS='{"NODE_ANNOTATION": "TAG_KEY"}'
    example: |2-

        cluster.k8s.io/machine: machine
    tags:
    - template_section:KubeApiServer
    - full-agent-only:true
  kubernetes_node_annotations_as_host_aliases:
    node_type: setting
    type: array
    default:
    - cluster.k8s.io/machine
    items:
      type: string
    visibility: public
    description: |-
      Configure node annotations that should be collected and used as host aliases.

      Env var example: DD_KUBERNETES_NODE_ANNOTATIONS_AS_HOST_ALIASES='["cluster.k8s.io/machine"]'
    tags:
    - template_section:KubeApiServer
    - full-agent-only:true
  cluster_name:
    node_type: setting
    type: string
    default: ''
    visibility: public
    description: |-
      Set a custom kubernetes cluster identifier to avoid host alias collisions.
      The cluster name can be up to 40 characters with the following restrictions:
      * Lowercase letters, numbers, and hyphens only.
      * Must start with a letter.
      * Must end with a number or a letter.

      These are the same rules as the ones enforced by GKE:
      https://cloud.google.com/kubernetes-engine/docs/reference/rest/v1beta1/projects.locations.clusters#Cluster.FIELDS.name
    example: <CLUSTER_IDENTIFIER>
    tags:
    - template_section:KubeApiServer
    - full-agent-only:true
  disable_cluster_name_tag_key:
    node_type: setting
    type: boolean
    default: false
    visibility: public
    description: |-
      Disable using the 'cluster_name' tag key to submit orchestrator cluster name tag.
      The Agent will continue sending the cluster name tag with 'kube|ecs_cluster_name' key
      regardless of the value of this parameter.
    tags:
    - template_section:KubeApiServer
    - full-agent-only:true
  kubernetes_ad_tags_disabled:
    node_type: setting
    type: array
    default: []
    items:
      type: string
    visibility: public
    description: |-
      Can only be set to a single valid value: [ "kube_service" ]
      in order to not attach the kube_service tag on ready pods
    example: |2-

        - kube_service
    tags:
    - template_section:KubeApiServer
  prometheus_scrape:
    node_type: section
    type: object
    visibility: public
    description: This section configures the Autodiscovery based on the Prometheus
      annotations
    tags:
    - template_section:CoreAgent
    - full-agent-only:true
    properties:
      enabled:
        node_type: setting
        type: boolean
        default: false
        visibility: public
        description: Enables the prometheus config provider
        comment: Enables the prometheus config provider
      service_endpoints:
        node_type: setting
        type: boolean
        default: false
        visibility: public
        description: Enables Service Endpoints checks in the prometheus config provider
        comment: Enables Service Endpoints checks in the prometheus config provider
      checks:
        node_type: setting
        type: string
        default: ''
        visibility: public
        description: Defines any extra prometheus/openmetrics check configurations
          to be handled by the prometheus config provider
        example: '{}'
        comment: Defines any extra prometheus/openmetrics check configurations to
          be handled by the prometheus config provider
      version:
        node_type: setting
        type: integer
        default: 1
        visibility: public
        description: Version of the openmetrics check to be scheduled by the Prometheus
          auto-discovery
        comment: Version of the openmetrics check to be scheduled by the Prometheus
          auto-discovery
  cloud_foundry_bbs:
    node_type: section
    title: Cloud Foundry BBS Configuration for Autodiscovery
    type: object
    visibility: public
    description: |-
      This section configures how the Cluster Agent accesses BBS API to gather information
      necessary for autodiscovery on BBS-based Cloud Foundry deployments.
    tags:
    - template_section:CloudFoundry
    - full-agent-only:true
    properties:
      url:
        node_type: setting
        type: string
        default: https://bbs.service.cf.internal:8889
        visibility: public
        description: URL of the BBS API.
        comment: Cloud Foundry BBS
      poll_interval:
        node_type: setting
        type: integer
        default: 15
        visibility: public
        description: |-
          Refresh rate of BBS API, in seconds. Values lower than 10 might influence
          performance of other operations in the cluster.
      ca_file:
        node_type: setting
        type: string
        default: ''
        visibility: public
        description: PEM-encoded CA certificate used when connecting to the BBS API.
      cert_file:
        node_type: setting
        type: string
        default: ''
        visibility: public
        description: PEM-encoded client certificate used when connecting to the BBS
          API.
      key_file:
        node_type: setting
        type: string
        default: ''
        visibility: public
        description: PEM-encoded client key used when connecting to the BBS API.
      env_include:
        node_type: setting
        type: array
        default: []
        items:
          type: string
        visibility: public
        description: List of regular expressions to allow a set of environment variables
          to be included as container tags
        example: |-
          []
          # @param env_exclude - list of strings - optional - default: []
          # @env DD_CLOUD_FOUNDRY_BBS_ENV_EXCLUDE - list of strings - optional
          # List of regular expressions to forbid a set of environment variables to be included as container tags

          env_exclude: []
      env_exclude:
        node_type: setting
        type: array
        default: []
        items:
          type: string
  cloud_foundry_cc:
    node_type: section
    title: Cloud Foundry Cloud Controller Configuration for Autodiscovery
    type: object
    visibility: public
    description: |-
      This section configures how the Cluster Agent accesses CC API to gather information
      necessary for autodiscovery on Cloud Foundry deployments.
    tags:
    - template_section:CloudFoundry
    - full-agent-only:true
    properties:
      url:
        node_type: setting
        type: string
        default: https://cloud-controller-ng.service.cf.internal:9024
        visibility: public
        description: URL of the CC API.
        comment: Cloud Foundry CC
      client_id:
        node_type: setting
        type: string
        default: ''
        visibility: public
        description: Client ID for oauth with UAA to get a token to access the CC
          API.
        example: <UAA_CLIENT_ID>
      client_secret:
        node_type: setting
        type: string
        default: ''
        visibility: public
        description: Client secrect for oauth with UAA to get a token to access the
          CC API.
        example: <UAA_CLIENT_SECRET>
      skip_ssl_validation:
        node_type: setting
        type: boolean
        default: false
        visibility: public
        description: Whether or not to skip SSL validation when interacting with CC
          API.
      poll_interval:
        node_type: setting
        type: integer
        default: 60
        visibility: public
        description: |-
          Refresh rate of CC API, in seconds. Values lower than 10 might influence
          performance of other operations in the cluster.
      apps_batch_size:
        node_type: setting
        type: integer
        default: 5000
        visibility: public
        description: Number of apps per page to collect when calling the list apps
          endpoint of the CC API. Max 5000.
  network_devices:
    node_type: section
    title: Network Devices Configuration
    type: object
    visibility: public
    description: Configuration related to Network Devices Monitoring
    tags:
    - template_section:CoreAgent
    - full-agent-only:true
    properties:
      namespace:
        node_type: setting
        type: string
        default: default
        visibility: public
        description: |-
          Namespace can be used to disambiguate devices with the same IP.
          Changing namespace will cause devices being recreated in NDM app.
          It should contain less than 100 characters and should not contain any of
          `<`, `>`, `\n`, `\t`, `\r` characters.
          This field is used by NDM features (SNMP check, SNMP Traps listener, etc).
      default_scan:
        node_type: section
        type: object
        visibility: public
        description: |-
          Configuration for automatic SNMP device scanning.
          When enabled, discovered SNMP devices are automatically scanned.
        tags:
        - template_section:CoreAgent
        properties:
          enabled:
            node_type: setting
            type: boolean
            default: true
            visibility: public
            description: |-
              Enable automatic scanning of discovered SNMP devices.
              When enabled, devices discovered via autodiscovery or configured
              directly will be scanned to collect OID data.
          excluded_ips:
            node_type: setting
            type: array
            default: []
            items:
              type: string
            visibility: public
            description: |-
              List of IP addresses to exclude from automatic scanning.
              Devices with these IP addresses will be skipped during default scan.
      autodiscovery:
        node_type: section
        type: object
        visibility: public
        description: |-
          Creates and schedules a listener to automatically discover your SNMP devices.
          Discovered devices can then be monitored with the SNMP integration by using
          the auto_conf.yaml file provided by default.
        tags:
        - template_section:CoreAgent
        properties:
          workers:
            node_type: setting
            type: integer
            default: 2
            visibility: public
            description: |-
              The number of concurrent tasks used to discover SNMP devices. Increasing this value
              discovers devices faster but at the cost of increased resource consumption.
          discovery_interval:
            node_type: setting
            type: integer
            default: 3600
            visibility: public
            description: |-
              How often to discover new SNMP devices, in seconds. Decreasing this value
              discovers devices faster (within the limit of the time taken to scan subnets)
              but at the cost of increased resource consumption.
            comment: |-
              network_devices.autodiscovery has precedence over snmp_listener config
              snmp_listener config is still here for legacy reasons
          discovery_allowed_failures:
            node_type: setting
            type: integer
            default: 3
            visibility: public
            description: |-
              The number of failed requests to a given SNMP device before removing it from the list of monitored
              devices.
              If a device shuts down, the Agent stops monitoring it after `discovery_interval * discovery_allowed_failures` seconds.
          loader:
            node_type: setting
            type: string
            default: core
            visibility: public
            description: |-
              Check loader to use. Available loaders:
              - core: (recommended) Uses new corecheck SNMP integration
              - python: Uses legacy python SNMP integration
          min_collection_interval:
            node_type: setting
            type: integer
            default: 15
            visibility: public
            description: |-
              This changes the collection interval for the check instances created
              from discovered SNMP devices.
              For more information, see:
              https://docs.datadoghq.com/developers/write_agent_check/#collection-interval
          use_device_id_as_hostname:
            node_type: setting
            type: boolean
            default: false
            visibility: public
            description: |-
              Use `device:<DEVICE_ID>` (device_id is composed of `<NAMESPACE>:<DEVICE_IP_ADDRESS>`) as `hostname`
              for metrics and service checks (meaning that metrics and services checks will have
              `host:device:<DEVICE_ID>` as tag).
              This option is needed for custom tags.
            example: 'true'
          collect_topology:
            node_type: setting
            type: boolean
            default: true
            visibility: public
            description: Enable the collection of topology (LLDP/CDP) data
          collect_vpn:
            node_type: setting
            type: boolean
            default: false
            visibility: public
            description: Enable collection of VPN tunnels and route table data
            example: 'true'
          ping:
            node_type: section
            type: object
            visibility: public
            description: |-
              Configure ICMP pings for all hosts in SNMP autodiscovery
              Devices will be pinged with these settings each time the SNMP
              check is run.

              By default, Datadog tries to use an unprivileged UDP socket to send ICMP
              pings, but some Linux systems require using a raw socket.

              If `linux.use_raw_socket` is set, you must enable the `ping` module
              of system-probe for elevated privileges. See
              system-probe.yaml.example for details.
            tags:
            - template_section:CoreAgent
            properties:
              enabled:
                node_type: setting
                type: boolean
                default: false
                visibility: public
                description: Set to true to enable ICMP ping checks for autodiscovered
                  SNMP devices.
              timeout:
                node_type: setting
                type: integer
                default: 3000
                visibility: public
                description: Timeout in milliseconds
              count:
                node_type: setting
                type: integer
                default: 2
                visibility: public
                description: Number of ping packets to send per check run
              interval:
                node_type: setting
                type: integer
                default: 10
                visibility: public
                description: Time between sending pings (up to `count` packets) in
                  milliseconds
              linux:
                node_type: section
                type: object
                visibility: public
                description: Linux-specific configuration
                tags:
                - template_section:CoreAgent
                properties:
                  use_raw_socket:
                    node_type: setting
                    type: boolean
                    default: false
                    visibility: public
                    description: |-
                      Send pings in a privileged fashion using a raw socket.
                      This may be required if your system doesn't support sending pings in an unprivileged fashion (using a UDP
                      socket).
                      If `use_raw_socket` is set to true, you MUST also enable system-probe which has elevated privileges. To
                      enable it, see system-probe.yaml.example.
                    example: 'true'
          use_deduplication:
            node_type: setting
            type: boolean
            default: false
            visibility: public
            description: |-
              Deduplicate IP addresses corresponding to the same device.
              The deduplication logic is based on the sysName, sysDesc, sysObjectID and sysUptime
          oid_batch_size:
            node_type: setting
            type: integer
            default: 5
            visibility: public
            description: |-
              The number of OIDs handled by each batch for all hosts in SNMP autodiscovery.
              Applies to all configurations if not overridden.
              By default, devices dynamically tune their batch size to optimize performance (agent version v7.73+).
          timeout:
            node_type: setting
            type: integer
            default: 5
            visibility: public
            description: The number of seconds before timing out. Applies to all configurations
              if not overridden.
          retries:
            node_type: setting
            type: integer
            default: 3
            visibility: public
            description: The number of retries before failure. Applies to all configurations
              if not overridden.
          configs:
            node_type: setting
            type: array
            default: []
            items:
              type: object
            visibility: public
            description: |-
              The actual list of configurations used to discover SNMP devices in various subnets.
              Example:
              configs:
               - network_address: 10.0.0.0/24
                 authentications:
                   - snmp_version: 1
                     community_string: public
               - network_address: 10.0.1.0/28
                 authentications:
                   - community_string: public
                 ignored_ip_addresses:
                   - 10.0.1.0
                   - 10.0.1.1
            example: |2-

                # @param network_address - string - required
                # The subnet in CIDR format to scan for SNMP devices.
                # All unignored IP addresses in the CIDR range are scanned.
                # For optimal discovery time, be sure to use the smallest network mask
                # possible as is appropriate for your network topology.
                # Ex: 10.0.1.0/24

                - network_address: <NETWORK>

                  # @param ignored_ip_addresses - list of strings - optional - default: []
                  # A list of IP addresses to ignore when scanning the network.

                  ignored_ip_addresses:
                    - <IP_ADDRESS_1>
                    - <IP_ADDRESS_2>

                  # @param port - integer - optional - default: 161
                  # The UDP port to use when connecting to SNMP devices.

                  port: 161

                  # @param timeout - integer - optional - default: 5
                  # The number of seconds before timing out. Applies to all authentications if not overridden.

                  # timeout: 5

                  # @param retries - integer - optional - default: 3
                  # The number of retries before failure. Applies to all authentications if not overridden.

                  # retries: 3

                  # @param authentications - list of custom objects - optional
                  # A list of authentication configurations to try when connecting to your SNMP devices.
                  # The Agent tries each configuration until it successfully connects.
                  # Example:
                  # authentications:
                  #   - community_string: public-1
                  #   - user: myUser
                  #     authKey: myAuthKey
                  #   - community_string: public-2

                  authentications:
                    # @param snmp_version - integer - optional - default: <BEST_GUESS>
                    # Set the version of the SNMP protocol. Available options are: `1`, `2` or `3`.
                    # If unset, the Agent tries to guess the correct version based on other configuration
                    # parameters, for example: if `user` is set, the Agent uses SNMP v3.

                    - snmp_version: <VERSION>

                      # @param timeout - integer - optional - default: 5
                      # The number of seconds before timing out.

                      # timeout: 5

                      # @param retries - integer - optional - default: 3
                      # The number of retries before failure.

                      # retries: 3

                      # @param community_string - string - optional
                      # Required for SNMP v1 & v2.
                      # Enclose the community string with single quote like below (to avoid special characters being interpreted).
                      # Ex: 'public'

                      community_string: '<COMMUNITY>'

                      # @param user - string - optional
                      # The username to connect to your SNMP devices.
                      # SNMPv3 only.

                      user: <USERNAME>

                      # @param authKey - string - optional
                      # The passphrase to use with your Authentication type.
                      # SNMPv3 only.

                      authKey: <AUTHENTICATION_KEY>

                      # @param authProtocol - string - optional
                      # The authentication protocol to use when connecting to your SNMP devices.
                      # Available options are: MD5, SHA, SHA224, SHA256, SHA384, SHA512
                      # Defaults to MD5 when `authentication_key` is specified.
                      # SNMPv3 only.

                      authProtocol: <AUTHENTICATION_PROTOCOL>

                      # @param privKey - string - optional
                      # The passphrase to use with your privacy protocol.
                      # SNMPv3 only.

                      privKey: <PRIVACY_KEY>

                      # @param privProtocol - string - optional
                      # The privacy protocol to use when connecting to your SNMP devices.
                      # Available options are: DES, AES (128 bits), AES192, AES192C, AES256, AES256C
                      # Defaults to DES when `privacy_key` is specified.
                      # SNMPv3 only.

                      privProtocol: <PRIVACY_PROTOCOL>

                      # @param context_name - string - optional
                      # The name of your context (optional SNMP v3-only parameter).

                      context_name: <CONTEXT_NAME>

                  # @param tags - list of strings - optional - default: []
                  # A list of tags to attach to every metric and service check of all devices discovered in the subnet.
                  #
                  # Learn more about tagging at https://docs.datadoghq.com/tagging

                  tags:
                    - <KEY_1>:<VALUE_1>
                    - <KEY_2>:<VALUE_2>

                  # @param ad_identifier - string - optional - default: snmp
                  # A unique identifier to attach to devices from that subnetwork.
                  # When configuring the SNMP integration in snmp.d/auto_conf.yaml,
                  # specify the corresponding ad_identifier at the top of the file.

                  ad_identifier: snmp

                  # @param loader - string - optional - default: core
                  # Check loader to use. Available loaders:
                  # - core: (recommended) Uses new corecheck SNMP integration
                  # - python: Uses legacy python SNMP integration

                  loader: core

                  # @param min_collection_interval - number - optional - default: 15
                  # This changes the collection interval for the check instances created from
                  # discovered SNMP devices. It applies to each specific config from `snmp_listener.configs`
                  # and has precedence over `snmp_listener.min_collection_interval`.
                  # For more information, see:
                  # https://docs.datadoghq.com/developers/write_agent_check/#collection-interval

                  min_collection_interval: 15

                  # @param use_device_id_as_hostname - boolean - optional - default: false
                  # Use `device:<DEVICE_ID>` (device_id is composed of `<NAMESPACE>:<DEVICE_IP_ADDRESS>`) as `hostname`
                  # for metrics and service checks (meaning that metrics and services checks will have
                  # `host:device:<DEVICE_ID>` as tag).
                  # This option is needed for custom tags.

                  use_device_id_as_hostname: true

                  # @param oid_batch_size - integer - optional - default: 5
                  # The number of OIDs handled by each batch.

                  oid_batch_size: 5

                  # @param interface_configs - map - optional
                  # This option is used to override interface inbound/outbound speed, add interface tags, or disable monitoring for specific interfaces
                  # Example:
                  # interface_configs:
                  #   "10.0.0.1":              # target device IP address
                  #     - match_field: "name"  # (required) the field to match, can be `name` (interface name) or `index` (ifIndex)
                  #       match_value: "eth0"  # (required) the value to match
                  #       in_speed: 50         # (optional) inbound speed value in bits per sec, no value or 0 means no override
                  #       out_speed: 25        # (optional) outbound speed value in bits per sec, no value or 0 means no override
                  #       tags:                # (optional) interface level tags
                  #         - "testTagKey:testTagValue"
                  #         - "tagKey2:tagValue2"
                  #       disabled: true         # (optional) disables monitoring for matched interfaces, default value is false

                  interface_configs:
                    "10.0.0.1":
                      - match_field: name
                        match_value: eth0
                        in_speed: 50
                        out_speed: 25
                      - match_field: index
                        match_value: '10'
                        in_speed: 50
                        out_speed: 25
                    "10.0.0.2":
                      - match_field: name
                        match_value: eth3
                        in_speed: 50
                        out_speed: 25
                    "10.0.0.3":
                      - match_field: name
                        match_value: eth4
                        tags:
                          - "monitored:true"
                          - "customKey:customValue"
                    "10.0.0.4":
                      - match_field: index
                        match_value: '2'
                        disabled: true
          allowed_failures:
            node_type: setting
            type: integer
            default: 3
          collect_device_metadata:
            node_type: setting
            type: boolean
            default: true
          namespace:
            node_type: setting
            type: string
            default: default
      snmp_traps:
        node_type: section
        type: object
        visibility: public
        description: |-
          This section configures SNMP traps collection.
          Traps are forwarded as logs and can be found in the logs explorer with a source:snmp-traps query
        tags:
        - template_section:CoreAgent
        properties:
          enabled:
            node_type: setting
            type: boolean
            default: false
            visibility: public
            description: Set to true to enable collection of traps.
          port:
            node_type: setting
            type: integer
            default: 9162
            visibility: public
            description: |-
              The UDP port to use when listening for incoming trap packets.
              Because the Datadog Agent does not run as root, the port cannot be below 1024.
              However, if you run `sudo setcap 'cap_net_bind_service=+ep' /opt/datadog-agent/bin/agent/agent`,
              the Datadog Agent can listen on ports below 1024.
          community_strings:
            node_type: setting
            type: array
            default: []
            items:
              type: string
            visibility: public
            description: |-
              A list of known SNMP community strings that devices can use to send traps to the Agent.
              Traps with an unknown community string are ignored.
              Enclose the community string with single quote like below (to avoid special characters being interpreted).
              Must be non-empty.
            example: |2-

                - '<COMMUNITY_1>'
                - '<COMMUNITY_2>'
          users:
            node_type: setting
            type: array
            default: []
            items:
              additionalProperties:
                type: string
              type: object
            visibility: public
            description: |-
              List of SNMPv3 users that can be used to listen for traps.
              Each user can contain:
               * user         - string - The username used by devices when sending Traps to the Agent.
               * authKey      - string - (Optional) The passphrase to use with the given user and authProtocol
               * authProtocol - string - (Optional) The authentication protocol to use when listening for traps from this user.
                                         Available options are: MD5, SHA, SHA224, SHA256, SHA384, SHA512.
                                         Defaults to MD5 when authKey is set.
               * privKey      - string - (Optional) The passphrase to use with the given user privacy protocol.
               * privProtocol - string - (Optional) The privacy protocol to use when listening for traps from this user.
                                         Available options are: DES, AES (128 bits), AES192, AES192C, AES256, AES256C.
                                         Defaults to DES when privKey is set.
            example: |2-

                - user: <USERNAME>
                  authKey: <AUTHENTICATION_KEY>
                  authProtocol: <AUTHENTICATION_PROTOCOL>
                  privKey: <PRIVACY_KEY>
                  privProtocol: <PRIVACY_PROTOCOL>
          bind_host:
            node_type: setting
            type: string
            default: 0.0.0.0
            visibility: public
            description: |-
              The hostname to listen on for incoming trap packets.
              Binds to 0.0.0.0 by default (accepting all packets).
          stop_timeout:
            node_type: setting
            type: integer
            default: 5
            visibility: public
            description: The maximum number of seconds to wait for the trap server
              to stop when the Agent shuts down.
            comment: in seconds
          tags:
            node_type: setting
            type: array
            default: []
            items:
              type: string
            visibility: public
            description: A list of low-cardinality tags (e.g. application, team, environment)
              attached to every trap forwarded to Datadog and to every SNMP traps
              telemetry metric emitted by the Agent.
            example: |2-

                - "application:<APPLICATION_ID>"
                - "team:<TEAM_NAME>"
          forwarder:
            node_type: section
            type: object
            properties:
              additional_endpoints:
                node_type: setting
                type: array
                default: []
                items:
                  type: object
              batch_max_concurrent_send:
                node_type: setting
                type: integer
                default: 0
              batch_max_content_size:
                node_type: setting
                type: integer
                default: 5000000
              batch_max_size:
                node_type: setting
                type: integer
                default: 1000
              batch_wait:
                node_type: setting
                type: number
                default: 5
                tags:
                - golang_type:float64
              compression_kind:
                node_type: setting
                type: string
                default: zstd
              compression_level:
                node_type: setting
                type: integer
                default: 6
              connection_reset_interval:
                node_type: setting
                type: integer
                default: 0
              dd_url:
                node_type: setting
                type: string
                default: ''
              dev_mode_no_ssl:
                node_type: setting
                type: boolean
                default: false
                tags:
                - no-env
              input_chan_size:
                node_type: setting
                type: integer
                default: 100
              logs_dd_url:
                node_type: setting
                type: string
                default: ''
              logs_no_ssl:
                node_type: setting
                type: boolean
                default: false
              sender_backoff_base:
                node_type: setting
                type: number
                default: 1
                tags:
                - golang_type:float64
              sender_backoff_factor:
                node_type: setting
                type: number
                default: 2
                tags:
                - golang_type:float64
              sender_backoff_max:
                node_type: setting
                type: number
                default: 120
                tags:
                - golang_type:float64
              sender_recovery_interval:
                node_type: setting
                type: integer
                default: 2
              sender_recovery_reset:
                node_type: setting
                type: boolean
                default: false
              use_compression:
                node_type: setting
                type: boolean
                default: true
              use_v2_api:
                node_type: setting
                type: boolean
                default: true
              zstd_compression_level:
                node_type: setting
                type: integer
                default: 1
      netflow:
        node_type: section
        type: object
        visibility: public
        description: This section configures NDM NetFlow (and sFlow, IPFIX) collection.
        tags:
        - template_section:CoreAgent
        properties:
          enabled:
            node_type: setting
            type: boolean
            default: false
            visibility: public
            description: Set to true to enable collection of NetFlow traffic.
            comment: NetFlow
          listeners:
            node_type: setting
            type: array
            default: []
            items:
              type: object
            visibility: public
            description: |-
              This section configures one or more listeners ports that will receive flow traffic.
              Each listener have the following options:
               * flow_type    - string - The flow type correspond to the incoming flow protocol.
                                         Choices are: netflow5, netflow9, ipfix, sflow5
               * port         - string - (Optional) The port used to receive incoming flow traffic.
                                         Default port differ by flow type: netflow5(2055), netflow9(2055), ipfix(4739), sflow5(6343)
               * bind_host    - string - (Optional) The hostname to listen on for incoming netflow packets.
                                         Binds to 0.0.0.0 by default (accepting all packets).
               * workers      - integer - (Optional) Number of workers to use for this listener.
                                         Defaults to 1.
               * mapping      - (Optional) List of NetflowV9/IPFIX fields to additionally collect.
                                           Defaults to None.
                  * field       - integer - The Netflow field type ID to collect.
                  * destination - string  - Name of the collected field, is queryable under @<destination> in Datadog.
                                           Default fields can be overridden, for example, `destination.port` overrides
                                           the default destination port collected.
                  * type        - string  - The field type.
                                           Available options are: string, integer, hex.
                                           Defaults to hex.
                  * endianness  - string  - (Optional) If type is integer, endianness can be set using this parameter.
                                           Available options are: big, little.
                                           Defaults to big.
            example: |2-

                - flow_type: netflow9
                  port: 2055
                  mapping:
                    - field: 1234
                      destination: transport_rtp_ssrc
                      type: integer
                - flow_type: netflow5
                  port: 2056
                - flow_type: ipfix
                  port: 4739
                - flow_type: sflow5
                  port: 6343
            tags:
            - no-env
          stop_timeout:
            node_type: setting
            type: integer
            default: 5
            visibility: public
            description: The maximum number of seconds to wait for the NetFlow listeners
              to stop when the Agent shuts down.
          reverse_dns_enrichment_enabled:
            node_type: setting
            type: boolean
            default: false
            visibility: public
            description: Set to true to enable reverse DNS enrichment of private source
              and destination IP addresses in NetFlow records.
          aggregator_buffer_size:
            node_type: setting
            type: integer
            default: 10000
          aggregator_flow_context_ttl:
            node_type: setting
            type: integer
            default: 0
            comment: |-
              The default behavior for this value is to copy the "aggregator_flush_interval" when absent/zero. This is to avoid
              expiring flows too early when the flush interval is increased, while still allowing to set a custom TTL when needed.
          aggregator_flush_interval:
            node_type: setting
            type: integer
            default: 300
          aggregator_port_rollup_threshold:
            node_type: setting
            type: integer
            default: 10
          aggregator_rollup_tracker_refresh_interval:
            node_type: setting
            type: integer
            default: 300
          forwarder:
            node_type: section
            type: object
            properties:
              additional_endpoints:
                node_type: setting
                type: array
                default: []
                items:
                  type: object
              batch_max_concurrent_send:
                node_type: setting
                type: integer
                default: 0
              batch_max_content_size:
                node_type: setting
                type: integer
                default: 5000000
              batch_max_size:
                node_type: setting
                type: integer
                default: 1000
              batch_wait:
                node_type: setting
                type: number
                default: 5
                tags:
                - golang_type:float64
              compression_kind:
                node_type: setting
                type: string
                default: zstd
              compression_level:
                node_type: setting
                type: integer
                default: 6
              connection_reset_interval:
                node_type: setting
                type: integer
                default: 0
              dd_url:
                node_type: setting
                type: string
                default: ''
              dev_mode_no_ssl:
                node_type: setting
                type: boolean
                default: false
                tags:
                - no-env
              input_chan_size:
                node_type: setting
                type: integer
                default: 100
              logs_dd_url:
                node_type: setting
                type: string
                default: ''
              logs_no_ssl:
                node_type: setting
                type: boolean
                default: false
              sender_backoff_base:
                node_type: setting
                type: number
                default: 1
                tags:
                - golang_type:float64
              sender_backoff_factor:
                node_type: setting
                type: number
                default: 2
                tags:
                - golang_type:float64
              sender_backoff_max:
                node_type: setting
                type: number
                default: 120
                tags:
                - golang_type:float64
              sender_recovery_interval:
                node_type: setting
                type: integer
                default: 2
              sender_recovery_reset:
                node_type: setting
                type: boolean
                default: false
              use_compression:
                node_type: setting
                type: boolean
                default: true
              use_v2_api:
                node_type: setting
                type: boolean
                default: true
              zstd_compression_level:
                node_type: setting
                type: integer
                default: 1
      config_management:
        node_type: section
        type: object
        properties:
          forwarder:
            node_type: section
            type: object
            properties:
              additional_endpoints:
                node_type: setting
                type: array
                default: []
                items:
                  type: object
              batch_max_concurrent_send:
                node_type: setting
                type: integer
                default: 0
              batch_max_content_size:
                node_type: setting
                type: integer
                default: 5000000
              batch_max_size:
                node_type: setting
                type: integer
                default: 1000
              batch_wait:
                node_type: setting
                type: number
                default: 5
                tags:
                - golang_type:float64
              compression_kind:
                node_type: setting
                type: string
                default: zstd
              compression_level:
                node_type: setting
                type: integer
                default: 6
              connection_reset_interval:
                node_type: setting
                type: integer
                default: 0
              dd_url:
                node_type: setting
                type: string
                default: ''
              dev_mode_no_ssl:
                node_type: setting
                type: boolean
                default: false
                tags:
                - no-env
              input_chan_size:
                node_type: setting
                type: integer
                default: 100
              logs_dd_url:
                node_type: setting
                type: string
                default: ''
              logs_no_ssl:
                node_type: setting
                type: boolean
                default: false
              sender_backoff_base:
                node_type: setting
                type: number
                default: 1
                tags:
                - golang_type:float64
              sender_backoff_factor:
                node_type: setting
                type: number
                default: 2
                tags:
                - golang_type:float64
              sender_backoff_max:
                node_type: setting
                type: number
                default: 120
                tags:
                - golang_type:float64
              sender_recovery_interval:
                node_type: setting
                type: integer
                default: 2
              sender_recovery_reset:
                node_type: setting
                type: boolean
                default: false
              use_compression:
                node_type: setting
                type: boolean
                default: true
              use_v2_api:
                node_type: setting
                type: boolean
                default: true
              zstd_compression_level:
                node_type: setting
                type: integer
                default: 1
          rollback:
            node_type: section
            type: object
            properties:
              enabled:
                node_type: setting
                type: boolean
                default: false
      metadata:
        node_type: section
        type: object
        properties:
          additional_endpoints:
            node_type: setting
            type: array
            default: []
            items:
              type: object
          batch_max_concurrent_send:
            node_type: setting
            type: integer
            default: 0
          batch_max_content_size:
            node_type: setting
            type: integer
            default: 5000000
          batch_max_size:
            node_type: setting
            type: integer
            default: 1000
          batch_wait:
            node_type: setting
            type: number
            default: 5
            tags:
            - golang_type:float64
          compression_kind:
            node_type: setting
            type: string
            default: zstd
          compression_level:
            node_type: setting
            type: integer
            default: 6
          connection_reset_interval:
            node_type: setting
            type: integer
            default: 0
          dd_url:
            node_type: setting
            type: string
            default: ''
          dev_mode_no_ssl:
            node_type: setting
            type: boolean
            default: false
            tags:
            - no-env
          input_chan_size:
            node_type: setting
            type: integer
            default: 100
          logs_dd_url:
            node_type: setting
            type: string
            default: ''
          logs_no_ssl:
            node_type: setting
            type: boolean
            default: false
          sender_backoff_base:
            node_type: setting
            type: number
            default: 1
            tags:
            - golang_type:float64
          sender_backoff_factor:
            node_type: setting
            type: number
            default: 2
            tags:
            - golang_type:float64
          sender_backoff_max:
            node_type: setting
            type: number
            default: 120
            tags:
            - golang_type:float64
          sender_recovery_interval:
            node_type: setting
            type: integer
            default: 2
          sender_recovery_reset:
            node_type: setting
            type: boolean
            default: false
          use_compression:
            node_type: setting
            type: boolean
            default: true
          use_v2_api:
            node_type: setting
            type: boolean
            default: true
          zstd_compression_level:
            node_type: setting
            type: integer
            default: 1
  reverse_dns_enrichment:
    node_type: section
    type: object
    visibility: public
    description: This section configures the reverse DNS enrichment component that
      can be used by other components in the Datadog Agent.
    tags:
    - template_section:CoreAgent
    - full-agent-only:true
    properties:
      workers:
        node_type: setting
        type: integer
        default: 10
        visibility: public
        description: The number of concurrent workers used to perform reverse DNS
          lookups.
        comment: Reverse DNS Enrichment
      chan_size:
        node_type: setting
        type: integer
        default: 5000
        visibility: public
        description: The size of the channel used to send reverse DNS lookup requests
          to the workers.
      cache:
        node_type: section
        type: object
        visibility: public
        description: This section configures the cache used by the reverse DNS enrichment
          component.
        tags:
        - template_section:CoreAgent
        properties:
          enabled:
            node_type: setting
            type: boolean
            default: true
            visibility: public
            description: Set to true to enable reverse DNS enrichment caching.
          entry_ttl:
            node_type: setting
            type: string
            default: 24h0m0s
            format: duration
            visibility: public
            description: The amount of time that a cache entry remains valid before
              it is expired and removed from the cache.
            example: 24h
            tags:
            - golang_type:duration
          clean_interval:
            node_type: setting
            type: string
            default: 2h0m0s
            format: duration
            visibility: public
            description: An interval that specifies how often expired entries are
              removed from the cache to free space.
            example: 2h
            tags:
            - golang_type:duration
          persist_interval:
            node_type: setting
            type: string
            default: 2h0m0s
            format: duration
            visibility: public
            description: An interval that specifies how often the cache is persisted
              to disk so the cache can be reloaded when the Agent is upgraded or restarted.
            example: 2h
            tags:
            - golang_type:duration
          max_retries:
            node_type: setting
            type: integer
            default: 10
            visibility: public
            description: The maximum number of retries to perform when a DNS lookup
              operation fails, after which the hostname "" is returned and cached
              for the IP address.
          max_size:
            node_type: setting
            type: integer
            default: 1000000
            visibility: public
            description: The maximum size in entries of the cache, above which additional
              entries will not be cached.
      rate_limiter:
        node_type: section
        type: object
        visibility: public
        description: This section configures the rate limiter used by the reverse
          DNS enrichment component.
        tags:
        - template_section:CoreAgent
        properties:
          enabled:
            node_type: setting
            type: boolean
            default: true
            visibility: public
            description: Set to true to enable the reverse DNS enrichment rate limiter.
          limit_per_sec:
            node_type: setting
            type: integer
            default: 1000
            visibility: public
            description: The maximum number of reverse DNS lookups allowed per second
              by the rate limiter.
          limit_throttled_per_sec:
            node_type: setting
            type: integer
            default: 1
            visibility: public
            description: The maximum number of reverse DNS lookups allowed per second
              when the rate limiter is throttled due to errors exceeding the threshold.
          throttle_error_threshold:
            node_type: setting
            type: integer
            default: 10
            visibility: public
            description: The number of consecutive errors that will trigger the rate
              limiter to throttle down to limit_throttled_per_sec.
          recovery_intervals:
            node_type: setting
            type: integer
            default: 5
            visibility: public
            description: The number of intervals over which to increase the rate limit
              back to limit_per_sec when lookups are again successful after being
              throttled due to errors.
          recovery_interval:
            node_type: setting
            type: string
            default: 5s
            format: duration
            visibility: public
            description: |-
              The interval between incrementally increasing the rate limit back to limit_per_sec when lookups are again successful after being throttled due to errors.
              The rate limit will be increased by (limit_per_sec - limit_throttled_per_sec) / recovery_intervals every recovery_interval, until it reaches
              limit_per_sec.  For example, with limit_per_sec=1000, limit_throttled_per_sec=1, recovery_intervals=5, recovery_interval=5s, the limit will
              be increased by 200 every 5 seconds until reaching 1000.
            tags:
            - golang_type:duration
            comment: |-
              These variables are similarly named, but they serve different purposes:
              - recovery_interval is the time to wait before trying to send data again after hitting the throttle_error_threshold
              - recovery_intervals is the number of consecutive intervals with errors before considering the issue resolved and lifting the throttling
  ha_agent:
    node_type: section
    type: object
    visibility: public
    description: This section configures High Availability Agent feature.
    tags:
    - template_section:CoreAgent
    - full-agent-only:true
    properties:
      enabled:
        node_type: setting
        type: boolean
        default: false
        visibility: public
        description: Set to true to enable High Availability Agent feature.
        comment: HA Agent
      group:
        node_type: setting
        type: string
        default: ''
  config_id:
    node_type: setting
    type: string
    default: ''
    visibility: public
    description: |-
      The config_id configuration is used by High Availability Agent to assign a specific config ID to an Agent.
      When used with `ha_agent.enabled: true`, all Agents with the same config_id will be part of the same group of Agents;
      meaning that, one Agent within this group is designated as primary and others as standby.
    tags:
    - template_section:CoreAgent
  otlp_config:
    node_type: section
    title: 'OpenTelemetry Configuration  '
    type: object
    visibility: public
    description: This section configures OTLP ingest in the Datadog Agent.
    tags:
    - template_section:CoreAgent
    properties:
      receiver:
        node_type: section
        type: object
        visibility: public
        description: |-
          The receiver configuration. It follows the OpenTelemetry Collector's OTLP Receiver Configuration.
          This template lists the most commonly used settings; see the OpenTelemetry Collector documentation
          for a full list of available settings:
          https://github.com/open-telemetry/opentelemetry-collector/blob/main/receiver/otlpreceiver/config.md
        tags:
        - template_section:CoreAgent
        properties:
          protocols:
            node_type: section
            type: object
            visibility: public
            description: Configuration for the supported protocols.
            tags:
            - template_section:CoreAgent
            properties:
              grpc:
                node_type: section
                type: object
                visibility: public
                description: |-
                  Configuration for OTLP/gRPC listener.
                  Setting this as an empty section enables the OTLP/gRPC listener with default options.
                tags:
                - template_section:CoreAgent
                properties:
                  endpoint:
                    node_type: setting
                    type: string
                    default: localhost:4317
                    visibility: public
                    description: The OTLP/gRPC listener endpoint.
                    comment: Receiver gRPC settings (defaults from OTel otlpreceiver
                      / configgrpc)
                  transport:
                    node_type: setting
                    type: string
                    default: tcp
                    visibility: public
                    description: |-
                      The OTLP/gRPC listener transport protocol.
                      Known protocols are "tcp", "udp", "ip", "unix", "unixgram", and "unixpacket".
                  max_recv_msg_size_mib:
                    node_type: setting
                    type: integer
                    default: 0
                    visibility: public
                    description: |-
                      The maximum size (in MiB) of messages accepted by the OTLP/gRPC endpoint.
                      When set to 0 (the default), grpc-go applies its built-in 4 MiB limit.
                  include_metadata:
                    node_type: setting
                    type: boolean
                    default: false
                  keepalive:
                    node_type: section
                    type: object
                    properties:
                      enforcement_policy:
                        node_type: section
                        type: object
                        properties:
                          min_time:
                            node_type: setting
                            type: string
                            default: 5m
                  max_concurrent_streams:
                    node_type: setting
                    type: integer
                    default: 0
                  read_buffer_size:
                    node_type: setting
                    type: integer
                    default: 524288
                  write_buffer_size:
                    node_type: setting
                    type: integer
                    default: 0
              http:
                node_type: section
                type: object
                visibility: public
                description: |-
                  Configuration for OTLP/HTTP listener.
                  Setting this as an empty section enables the OTLP/HTTP listener with default options.
                tags:
                - template_section:CoreAgent
                properties:
                  endpoint:
                    node_type: setting
                    type: string
                    default: localhost:4318
                    visibility: public
                    description: The OTLP/HTTP listener endpoint.
                    comment: Receiver HTTP settings (defaults from OTel otlpreceiver
                      / confighttp)
                  cors:
                    node_type: section
                    type: object
                    properties:
                      allowed_headers:
                        node_type: setting
                        type: array
                        default: []
                        items:
                          type: string
                      allowed_origins:
                        node_type: setting
                        type: array
                        default: []
                        items:
                          type: string
                  include_metadata:
                    node_type: setting
                    type: boolean
                    default: false
                  max_request_body_size:
                    node_type: setting
                    type: integer
                    default: 0
      metrics:
        node_type: section
        type: object
        visibility: public
        description: Metrics-specific configuration for OTLP ingest in the Datadog
          Agent.
        tags:
        - template_section:CoreAgent
        properties:
          enabled:
            node_type: setting
            type: boolean
            default: true
            visibility: public
            description: |-
              Set to false to disable metrics support in the OTLP ingest endpoint.
              To enable the OTLP ingest, the otlp_config.receiver section must be set.
          resource_attributes_as_tags:
            node_type: setting
            type: boolean
            default: false
            visibility: public
            description: |-
              Set to true to add resource attributes of a metric to its metric tags. Please note that any of
              the subset of resource attributes in this list https://docs.datadoghq.com/opentelemetry/guide/semantic_mapping/
              are converted to Datadog conventions and set to to metric tags whether this option is enabled or not.
          instrumentation_scope_metadata_as_tags:
            node_type: setting
            type: boolean
            default: true
            visibility: public
            description: Set to true to add metadata about the instrumentation scope
              that created a metric.
          tag_cardinality:
            node_type: setting
            type: string
            default: low
            env_vars:
            - DD_OTLP_CONFIG_METRICS_TAG_CARDINALITY
            - DD_OTLP_TAG_CARDINALITY
            visibility: public
            description: |-
              Configure the level of granularity of tags to send for OTLP metrics. Choices are:
                * low: add tags about low-cardinality objects (clusters, hosts, deployments, container images, ...)
                * orchestrator: add tags about pod, (in Kubernetes), or task (in ECS or Mesos) -level of cardinality
                * high: add tags about high-cardinality objects (individual containers, user IDs in requests, ...)
              WARNING: sending container tags for checks metrics may create more metrics
              (one per container instead of one per host). This may impact your custom metrics billing.
            comment: This only partially works. The environment variable is also manually
              checked in comp/otelcol/otlp/config.go
          delta_ttl:
            node_type: setting
            type: integer
            default: 3600
            visibility: public
            description: |-
              The amount of time (in seconds) that values are kept in memory for
              calculating deltas for cumulative monotonic metrics.
          histograms:
            node_type: section
            type: object
            visibility: public
            description: |-
              Configuration for OTLP Histograms.
              See https://docs.datadoghq.com/metrics/otlp/?tab=histogram for details.
            tags:
            - template_section:CoreAgent
            properties:
              mode:
                node_type: setting
                type: string
                default: distributions
                visibility: public
                description: |-
                  How to report histograms. Valid values are:

                  - `distributions` to report metrics as Datadog distributions (recommended).
                  - `nobuckets` to not report bucket metrics,
                  - `counters` to report one metric per histogram bucket.
              send_count_sum_metrics:
                node_type: setting
                type: boolean
                default: false
                visibility: public
                description: |-
                  Deprecated - use `send_aggregation_metrics` instead. This flag will override `send_aggregation_metrics` if both are set.

                  Whether to report sum, count, min, and max as separate histogram metrics.
              send_aggregation_metrics:
                node_type: setting
                type: boolean
                default: false
                visibility: public
                description: Whether to report sum, count, min, and max as separate
                  histogram metrics.
          sums:
            node_type: section
            type: object
            visibility: public
            description: |-
              Configuration for OTLP Sums.
              See https://docs.datadoghq.com/metrics/otlp/?tab=sum for details.
            tags:
            - template_section:CoreAgent
            properties:
              cumulative_monotonic_mode:
                node_type: setting
                type: string
                default: to_delta
                visibility: public
                description: |-
                  How to report cumulative monotonic sums. Valid values are:

                  - `to_delta` to calculate delta for sum in the client side and report as Datadog counts.
                  - `raw_value` to report the raw value as a Datadog gauge.
              initial_cumulative_monotonic_value:
                node_type: setting
                type: string
                default: auto
                visibility: public
                description: |-
                  How to report the initial value for cumulative monotonic sums. Valid values are:

                  - `auto` reports the initial value if its start timestamp is set and it happens after the process was started.
                  - `drop` always drops the initial value.
                  - `keep` always reports the initial value.
          summaries:
            node_type: section
            type: object
            visibility: public
            description: |-
              Configuration for OTLP Summaries.
              See https://docs.datadoghq.com/metrics/otlp/?tab=summary for more details.
            tags:
            - template_section:CoreAgent
            properties:
              mode:
                node_type: setting
                type: string
                default: gauges
                visibility: public
                description: |-
                  How to report summaries. Valid values are:

                  - `noquantiles` to not report quantile metrics.
                  - `gauges` to report one gauge metric per quantile.
          batch:
            node_type: section
            type: object
            visibility: public
            description: |-
              Configuration for the OTLP sending queue (batch settings).
              See https://github.com/open-telemetry/opentelemetry-collector/tree/main/exporter/exporterhelper#sending-queue-batch-settings for more details.
            tags:
            - template_section:CoreAgent
            properties:
              min_size:
                node_type: setting
                type: integer
                default: 8192
                visibility: public
                description: The minimum number of metrics to batch before sending.
              max_size:
                node_type: setting
                type: integer
                default: 0
                visibility: public
                description: The maximum number of metrics to batch before sending.
                  0 means no limit on the maximum number.
              flush_timeout:
                node_type: setting
                type: string
                default: 200ms
                visibility: public
                description: The timeout for flushing the batch.
          tags:
            node_type: setting
            type: string
            default: ''
      traces:
        node_type: section
        type: object
        visibility: public
        description: Traces-specific configuration for OTLP ingest in the Datadog
          Agent.
        tags:
        - template_section:CoreAgent
        properties:
          enabled:
            node_type: setting
            type: boolean
            default: true
            visibility: public
            description: |-
              Set to false to disable traces support in the OTLP ingest endpoint.
              To enable the OTLP ingest, the otlp_config.receiver section must be set.
          span_name_as_resource_name:
            node_type: setting
            type: boolean
            default: false
            visibility: public
            description: |-
              If set to true the OpenTelemetry span name will used in the Datadog resource name.
              If set to false the resource name will be filled with the instrumentation library name + span kind.
          span_name_remappings:
            node_type: setting
            type: object
            default: {}
            additionalProperties:
              type: string
            visibility: public
            description: |-
              Defines a map of span names and preferred names to map to. This can be used to automatically map Datadog Span
              Operation Names to an updated value.
              span_name_remappings:
                "io.opentelemetry.javaagent.spring.client": "spring.client"
                "instrumentation:express.server": "express"
                "go.opentelemetry.io_contrib_instrumentation_net_http_otelhttp.client": "http.client"
            example: |2-

                <OLD_NAME>: <NEW_NAME>
          probabilistic_sampler:
            node_type: section
            type: object
            visibility: public
            description: |-
              Probabilistic sampler controlling the rate of ingestion. Using this sampler works consistently
              in a distributed system where the sampling rate is shared. Exceptions are made for errors and
              rare traces (if enabled via apm_config.enable_rare_sampler).
            tags:
            - template_section:CoreAgent
            properties:
              sampling_percentage:
                node_type: setting
                type: number
                default: 100
                env_vars:
                - DD_OTLP_CONFIG_TRACES_PROBABILISTIC_SAMPLER_SAMPLING_PERCENTAGE
                visibility: public
                description: |-
                  If `apm_config.probabilistic_sampler.enabled` is enabled, this config is ignored, `apm_config.probabilistic_sampler.enabled.sampling_percentage`
                  is used instead.
                  Percentage of traces to ingest (0 100]. Invalid values (<= 0 || > 100) are disconsidered and the default is used.
                  If incoming spans have a sampling.priority set by the user, it will be followed and the sampling percentage will
                  be overridden.
                tags:
                - golang_type:float64
          infra_attributes:
            node_type: section
            type: object
            visibility: public
            description: Controls whether infrastructure attributes (host tags, container
              tags) are attached to OTLP traces ingested by the Agent.
            tags:
            - template_section:CoreAgent
            properties:
              enabled:
                node_type: setting
                type: boolean
                default: true
                visibility: public
                description: Set to false to disable Infra-Attribute-Processor for
                  traces pipeline in the OTLP ingest endpoint.
              container_tag_promotion:
                node_type: setting
                type: string
                default: 'off'
                visibility: public
                description: |-
                  Controls how the Infra-Attribute-Processor promotes custom container tags into
                  `_dd.tags.container` (visible in the Infrastructure tab) for the traces pipeline.
                  This setting only affects traces. Accepted values:
                    off:       tags are written as-is; only keys recognized by the trace-agent reach `_dd.tags.container` (default).
                    duplicate: write both the original tag and a `datadog.container.tag.<key>` copy.
                    rename:    write only the `datadog.container.tag.<key>` form (smaller payload).
                comment: |-
                  container_tag_promotion controls how the infraattributes processor promotes custom
                  container tags into `_dd.tags.container` for traces. Valid values: off, duplicate, rename.
          internal_port:
            node_type: setting
            type: integer
            default: 5003
      logs:
        node_type: section
        type: object
        visibility: public
        description: Logs-specific configuration for OTLP ingest in the Datadog Agent.
        tags:
        - template_section:CoreAgent
        properties:
          enabled:
            node_type: setting
            type: boolean
            default: false
            visibility: public
            description: |-
              Set to true to enable logs support in the OTLP ingest endpoint.
              To enable the OTLP ingest, the otlp_config.receiver section must be set.
            example: 'true'
          batch:
            node_type: section
            type: object
            visibility: public
            description: |-
              Configuration for OTLP sending queue batch.
              See https://github.com/open-telemetry/opentelemetry-collector/tree/main/exporter/exporterhelper#sending-queue-batch-settings for more details.
            tags:
            - template_section:CoreAgent
            properties:
              min_size:
                node_type: setting
                type: integer
                default: 8192
                visibility: public
                description: The minimum number of metrics to batch before sending.
              max_size:
                node_type: setting
                type: integer
                default: 0
                visibility: public
                description: The maximum number of logs to batch before sending. 0
                  means no limit on the maximum number.
              flush_timeout:
                node_type: setting
                type: string
                default: 200ms
                visibility: public
                description: The timeout for flushing the batch.
      debug:
        node_type: section
        type: object
        visibility: public
        description: |-
          Debug-specific configuration for OTLP ingest in the Datadog Agent.
          This template lists the most commonly used settings; see the OpenTelemetry Collector documentation
          for a full list of available settings:
          https://github.com/open-telemetry/opentelemetry-collector/tree/main/exporter/debugexporter#getting-started
        tags:
        - template_section:CoreAgent
        properties:
          verbosity:
            node_type: setting
            type: string
            default: basic
            visibility: public
            description: |-
              Verbosity of debug logs when Datadog Agent receives otlp traces/metrics.
              Valid values are basic, normal, detailed, none.
            comment: Debug settings (default from OTel debugexporter)
      grpc_port:
        node_type: setting
        type: integer
        default: 0
        comment: Legacy port keys (unused; 0 = disabled)
      http_port:
        node_type: setting
        type: integer
        default: 0
        comment: Legacy port keys (unused; 0 = disabled)
  private_action_runner:
    $ref: private_action_runner.yaml
  GUI_host:
    node_type: setting
    type: string
    default: localhost
    comment: |-
      Agent GUI access host
      'http://localhost' is preferred over 'http://127.0.0.1' due to Internet Explorer behavior.
      Internet Explorer High Security Level does not support setting cookies via HTTP Header response.
      By default, 'http://localhost' is categorized as an "intranet" website, which is considered safer and allowed to use cookies. This is not the case for 'http://127.0.0.1'.
  additional_endpoints:
    node_type: setting
    type: object
    default: {}
    additionalProperties:
      items:
        type: string
      type: array
  agent_ipc:
    node_type: section
    type: object
    properties:
      config_refresh_interval:
        node_type: setting
        type: integer
        default: 0
      grpc_max_message_size:
        node_type: setting
        type: integer
        default: 134217728
      grpc_warning_message_size:
        node_type: setting
        type: integer
        default: 33554432
      host:
        node_type: setting
        type: string
        default: localhost
      port:
        node_type: setting
        type: integer
        default: 0
      socket_path:
        node_type: setting
        type: string
        default: ${run_path}/agent_ipc.socket
      use_socket:
        node_type: setting
        type: boolean
        default: false
  agent_telemetry:
    $ref: agent_telemetry.yaml
  aggregator_flush_metrics_and_serialize_in_parallel_buffer_size:
    node_type: setting
    type: integer
    default: 4000
  aggregator_flush_metrics_and_serialize_in_parallel_chan_size:
    node_type: setting
    type: integer
    default: 200
  aggregator_tag_filter_cache_capacity:
    node_type: setting
    type: integer
    default: 1000
  aggregator_use_tags_store:
    node_type: setting
    type: boolean
    default: true
  allow_arbitrary_tags:
    node_type: setting
    type: boolean
    default: false
  allow_python_path_heuristics_failure:
    node_type: setting
    type: boolean
    default: false
    tags:
    - full-agent-only:true
    comment: |-
      When the Python full interpreter path cannot be deduced via heuristics, the agent
      is expected to prevent rtloader from initializing. When set to true, this override
      allows us to proceed but with some capabilities unavailable (e.g. `multiprocessing`
      library support will not work reliably in those environments)
  allowed_additional_checks:
    node_type: setting
    type: array
    default: []
    items:
      type: string
    comment: |-
      Legacy alias for backward compatibility
      This applies to the current infrastructure_mode
  anomaly_detection:
    node_type: section
    type: object
    properties:
      anomaly_scorer:
        node_type: section
        type: object
        properties:
          alpha:
            node_type: setting
            type: number
            default: 0.014
            tags:
            - golang_type:float64
          dry_run:
            node_type: section
            type: object
            properties:
              enabled:
                node_type: setting
                type: boolean
                default: false
          high_threshold:
            node_type: setting
            type: number
            default: 0.4
            tags:
            - golang_type:float64
          low_threshold:
            node_type: setting
            type: number
            default: 0.15
            tags:
            - golang_type:float64
          margin_pct:
            node_type: setting
            type: number
            default: 0.2
            tags:
            - golang_type:float64
          output:
            node_type: section
            type: object
            properties:
              cooldown:
                node_type: setting
                type: string
                default: 5m0s
                format: duration
                tags:
                - golang_type:duration
              correlation_event_threshold:
                node_type: setting
                type: string
                default: high
              correlation_events:
                node_type: setting
                type: boolean
                default: false
              logs:
                node_type: setting
                type: boolean
                default: false
              max_anomalies:
                node_type: setting
                type: integer
                default: 50
          saturation_k:
            node_type: setting
            type: number
            default: 5
            tags:
            - golang_type:float64
          window:
            node_type: setting
            type: string
            default: 15s
            format: duration
            tags:
            - golang_type:duration
      baseline_analysis:
        node_type: section
        type: object
        properties:
          duration:
            node_type: setting
            type: string
            default: 10m
          enabled:
            node_type: setting
            type: boolean
            default: true
            comment: Baseline analysis window.
          mute_noisy_metrics:
            node_type: setting
            type: boolean
            default: true
          verbose:
            node_type: setting
            type: boolean
            default: false
      debug:
        node_type: section
        type: object
        properties:
          dump_interval:
            node_type: setting
            type: integer
            default: 0
          dump_path:
            node_type: setting
            type: string
            default: ''
            comment: 'Debug tooling: internal state dump. Leave empty/zero in production.'
          events_dump_path:
            node_type: setting
            type: string
            default: ''
      detectors:
        node_type: section
        type: object
        properties:
          bocpd:
            node_type: section
            type: object
            properties:
              enabled:
                node_type: setting
                type: boolean
                default: true
          connection_error_extractor:
            node_type: section
            type: object
            properties:
              enabled:
                node_type: setting
                type: boolean
                default: false
          cross_signal:
            node_type: section
            type: object
            properties:
              enabled:
                node_type: setting
                type: boolean
                default: false
          cusum:
            node_type: section
            type: object
            properties:
              enabled:
                node_type: setting
                type: boolean
                default: false
          holt_residual:
            node_type: section
            type: object
            properties:
              enabled:
                node_type: setting
                type: boolean
                default: false
          log_metrics_extractor:
            node_type: section
            type: object
            properties:
              enabled:
                node_type: setting
                type: boolean
                default: true
                comment: Detector/correlator/extractor toggles. Defaults match componentCatalog.defaultEnabled.
          log_pattern_extractor:
            node_type: section
            type: object
            properties:
              enabled:
                node_type: setting
                type: boolean
                default: true
          passthrough:
            node_type: section
            type: object
            properties:
              enabled:
                node_type: setting
                type: boolean
                default: false
          rrcf:
            node_type: section
            type: object
            properties:
              enabled:
                node_type: setting
                type: boolean
                default: true
          scanmw:
            node_type: section
            type: object
            properties:
              enabled:
                node_type: setting
                type: boolean
                default: false
          scanwelch:
            node_type: section
            type: object
            properties:
              enabled:
                node_type: setting
                type: boolean
                default: false
          time_cluster:
            node_type: section
            type: object
            properties:
              enabled:
                node_type: setting
                type: boolean
                default: true
              min_cluster_size:
                node_type: setting
                type: integer
                default: 0
          tukey_biweight:
            node_type: section
            type: object
            properties:
              enabled:
                node_type: setting
                type: boolean
                default: false
      logs:
        node_type: section
        type: object
        properties:
          containers:
            node_type: section
            type: object
            properties:
              enabled:
                node_type: setting
                type: boolean
                default: true
              max_rate_high_priority:
                node_type: setting
                type: number
                default: -1
                tags:
                - golang_type:float64
                comment: unlimited
              max_rate_low_priority:
                node_type: setting
                type: number
                default: 1
                tags:
                - golang_type:float64
              max_rate_medium_priority:
                node_type: setting
                type: number
                default: 100
                tags:
                - golang_type:float64
              min_severity:
                node_type: setting
                type: string
                default: warn
                comment: Container log rate limits (enabled flag already set above).
          enabled:
            node_type: setting
            type: boolean
            default: true
            comment: |-
              Log ingestion gate. When false, all log sources (container, kubelet, internal)
              are not routed into the anomaly detection pipeline (recording is unaffected).
          internal:
            node_type: section
            type: object
            properties:
              enabled:
                node_type: setting
                type: boolean
                default: true
                comment: |-
                  Internal agent log tap.
                  min_severity is the minimum level forwarded (logs below it are dropped before sampling).
                  max_rate_* are in logs/second measured over a 10-second fixed window and apply
                  after the min_severity gate. -1 means unlimited (no cap); 0 drops all logs of that priority.
                  high_priority = warn/error/critical, medium_priority = info, low_priority = debug.
              max_rate_high_priority:
                node_type: setting
                type: number
                default: -1
                tags:
                - golang_type:float64
                comment: unlimited
              max_rate_low_priority:
                node_type: setting
                type: number
                default: 1
                tags:
                - golang_type:float64
              max_rate_medium_priority:
                node_type: setting
                type: number
                default: 100
                tags:
                - golang_type:float64
              min_severity:
                node_type: setting
                type: string
                default: warn
          kubelet:
            node_type: section
            type: object
            properties:
              enabled:
                node_type: setting
                type: boolean
                default: true
              max_rate_high_priority:
                node_type: setting
                type: number
                default: -1
                tags:
                - golang_type:float64
                comment: unlimited
              max_rate_low_priority:
                node_type: setting
                type: number
                default: 1
                tags:
                - golang_type:float64
              max_rate_medium_priority:
                node_type: setting
                type: number
                default: 100
                tags:
                - golang_type:float64
              min_severity:
                node_type: setting
                type: string
                default: warn
                comment: Kubelet journald log rate limits (enabled flag already set
                  above).
          processing_rules:
            node_type: setting
            type: array
            default: []
            items:
              type: object
            comment: Ordered log-processing rules applied to anomaly-detection log
              sources.
      metrics:
        node_type: section
        type: object
        properties:
          enabled:
            node_type: setting
            type: boolean
            default: true
            comment: |-
              Metrics ingestion gate. When false, externally-ingested metrics
              (DogStatsD, check samplers) are dropped at the handle factory.
              Log-derived virtual metrics are unaffected.
          processing_rules:
            node_type: setting
            type: array
            default: []
            items:
              type: object
            comment: Ordered metric-processing rules applied at the observer handle
              boundary.
      recording:
        node_type: section
        type: object
        properties:
          enabled:
            node_type: setting
            type: boolean
            default: false
            comment: Parquet recording of raw ingested signals for offline analysis
              and replay.
          flush_interval:
            node_type: setting
            type: integer
            default: 60
          output_dir:
            node_type: setting
            type: string
            default: /var/run/datadog/anomaly_detection
          retention:
            node_type: setting
            type: string
            default: 24h
      reporting:
        node_type: section
        type: object
        properties:
          events:
            node_type: section
            type: object
            properties:
              enabled:
                node_type: setting
                type: boolean
                default: false
                comment: Datadog event reporting. Keep false during evaluation / shadow
                  mode.
          stdout:
            node_type: section
            type: object
            properties:
              enabled:
                node_type: setting
                type: boolean
                default: true
                comment: |-
                  Stdout reporting verbosity.
                  stdout.enabled: set to false to silence all [observer] stdout log lines.
                  stdout.verbose: set to true to print individual anomaly series after the title line.
                  Default: title-only (stdout.enabled=true, stdout.verbose=false).
              verbose:
                node_type: setting
                type: boolean
                default: false
      storage:
        node_type: section
        type: object
        properties:
          eviction_floor_ratio:
            node_type: setting
            type: number
            default: 0.5
            tags:
            - golang_type:float64
          max_series:
            node_type: setting
            type: integer
            default: 50000
            comment: Storage tuning. See storageConfig in the observer component.
          point_retention:
            node_type: setting
            type: string
            default: 2m0s
            format: duration
            tags:
            - golang_type:duration
  appsec:
    node_type: section
    type: object
    properties:
      proxy:
        node_type: section
        type: object
        properties:
          auto_detect:
            node_type: setting
            type: boolean
            default: true
          enabled:
            node_type: setting
            type: boolean
            default: false
            comment: Appsec Proxy Config Injection (Experimental)
          processor:
            node_type: section
            type: object
            properties:
              address:
                node_type: setting
                type: string
                default: ''
              port:
                node_type: setting
                type: integer
                default: 443
          proxies:
            node_type: setting
            type: array
            default: []
            items:
              type: string
    tags:
    - full-agent-only:true
  auth_init_timeout:
    node_type: setting
    type: string
    default: 30s
    format: duration
    tags:
    - golang_type:duration
    comment: used to override the acceptable duration for the agent to load or create
      auth artifacts (auth_token and IPC cert/key files)
  auth_token_file_path:
    node_type: setting
    type: string
    default: ''
  autoconfig_from_environment:
    node_type: setting
    type: boolean
    default: true
  autoscaling:
    node_type: section
    type: object
    properties:
      cluster:
        node_type: section
        type: object
        properties:
          enabled:
            node_type: setting
            type: boolean
            default: false
            comment: Cluster autoscaling product
          spot:
            node_type: section
            type: object
            properties:
              defaults:
                node_type: section
                type: object
                properties:
                  min_on_demand_replicas:
                    node_type: setting
                    type: integer
                    default: 0
                  percentage:
                    node_type: setting
                    type: integer
                    default: 100
              enabled:
                node_type: setting
                type: boolean
                default: false
                comment: Spot scheduling
              fallback_duration:
                node_type: setting
                type: string
                default: 2m
              rebalance_stabilization_period:
                node_type: setting
                type: string
                default: 1m
              schedule_timeout:
                node_type: setting
                type: string
                default: 1m
      failover:
        node_type: section
        type: object
        properties:
          enabled:
            node_type: setting
            type: boolean
            default: false
          metrics:
            node_type: setting
            type: array
            default:
            - container.memory.usage
            - container.cpu.usage
            items:
              type: string
      workload:
        node_type: section
        type: object
        properties:
          enabled:
            node_type: setting
            type: boolean
            default: false
            comment: Workload autoscaling product
          external_recommender:
            node_type: section
            type: object
            properties:
              tls:
                node_type: section
                type: object
                properties:
                  ca_file:
                    node_type: setting
                    type: string
                    default: ''
                  cert_file:
                    node_type: setting
                    type: string
                    default: ''
                  key_file:
                    node_type: setting
                    type: string
                    default: ''
          in_place_vertical_scaling:
            node_type: section
            type: object
            properties:
              disruption_tolerance_percent:
                node_type: setting
                type: integer
                default: 15
              enabled:
                node_type: setting
                type: boolean
                default: true
          limit:
            node_type: setting
            type: integer
            default: 1000
          num_workers:
            node_type: setting
            type: integer
            default: 2
  basic_telemetry_add_container_tags:
    node_type: setting
    type: boolean
    default: false
    comment: configure adding the agent container tags to the basic agent telemetry
      metrics (e.g. `datadog.agent.running`)
  bosh_id:
    node_type: setting
    type: string
    default: ''
  c_core_dump:
    node_type: setting
    type: boolean
    default: false
  c_stacktrace_collection:
    node_type: setting
    type: boolean
    default: false
    comment: Debugging + C-land crash feature flags
  cel_workload_exclude:
    node_type: setting
    type: array
    default: []
    tags:
    - full-agent-only:true
    comment: Agent Workload Filtering config
  cf_os_hostname_aliasing:
    node_type: setting
    type: boolean
    default: false
  check_cancel_timeout:
    node_type: setting
    type: string
    default: 500ms
    format: duration
    tags:
    - golang_type:duration
  check_runner_utilization_monitor_interval:
    node_type: setting
    type: string
    default: 1m0s
    format: duration
    tags:
    - golang_type:duration
  check_runner_utilization_threshold:
    node_type: setting
    type: number
    default: 0.95
    tags:
    - golang_type:float64
  check_runner_utilization_warning_cooldown:
    node_type: setting
    type: string
    default: 10m0s
    format: duration
    tags:
    - golang_type:duration
  check_sampler_allow_sketch_bucket_reset:
    node_type: setting
    type: boolean
    default: true
    tags:
    - full-agent-only:true
  check_sampler_bucket_commits_count_expiry:
    node_type: setting
    type: integer
    default: 2
    tags:
    - full-agent-only:true
    comment: |-
      The number of commits before expiring a context. The value is 2 to handle
      the case where a check miss to send a metric.
  check_sampler_context_metrics:
    node_type: setting
    type: boolean
    default: false
    tags:
    - full-agent-only:true
  check_sampler_expire_metrics:
    node_type: setting
    type: boolean
    default: true
    tags:
    - full-agent-only:true
  check_sampler_stateful_metric_expiration_time:
    node_type: setting
    type: string
    default: 25h0m0s
    format: duration
    tags:
    - golang_type:duration
    - full-agent-only:true
    comment: |-
      The number of seconds before removing stateful metric data after expiring a
      context. Default is 25h, to minimise problems for checks that emit metircs
      only occasionally.
  check_system_probe_startup_time:
    node_type: setting
    type: string
    default: 5m0s
    format: duration
    tags:
    - golang_type:duration
  check_system_probe_timeout:
    node_type: setting
    type: string
    default: 1m0s
    format: duration
    tags:
    - golang_type:duration
  check_watchdog_warning_timeout:
    node_type: setting
    type: string
    default: 0s
    format: duration
    tags:
    - golang_type:duration
    comment: If not zero, the agent will log a warning if a check is running for longer
      than this timeout
  clc_runner_enabled:
    node_type: setting
    type: boolean
    default: false
    tags:
    - full-agent-only:true
    comment: Cluster check runner
  clc_runner_host:
    node_type: setting
    type: string
    default: ''
    tags:
    - full-agent-only:true
    comment: must be set using the Kubernetes downward API
  clc_runner_id:
    node_type: setting
    type: string
    default: ''
    tags:
    - full-agent-only:true
  clc_runner_port:
    node_type: setting
    type: integer
    default: 5005
    tags:
    - full-agent-only:true
  clc_runner_remote_tagger_enabled:
    node_type: setting
    type: boolean
    default: true
    tags:
    - full-agent-only:true
    comment: |-
      Enabling remote tagger in cluster check runners by default allows
      enriching the cluster check runners with tags sourced from the
      cluster agent's cluster tagger.

      This was previously disabled because of the overhead this can
      cause on large clusters. This is no longer an issue because
      the tagger now supports filtering out unwanted tags and the
      cluster check runner remote tagger filters out pod tags, making
      the overhead relatively insignificant.

      For more details: https://github.com/DataDog/datadog-agent/blob/8af994a91cafecf647197e1638de9ddd98b06575/cmd/agent/common/tagger_params.go#L1-L39

      The benefit of activating this is allowing cluster checks and component
      running in the cluster check runner to gain better tagging coverage
      on emitted metrics:

      * KSM check running in CLC runner needs the remote tagger to ensure
      namespace labels and annotations as tags are applied to emitted KSM
      metrics in case the check is partitioned to multiple instances, each
      emitting different resource metrics.
  clc_runner_server_readheader_timeout:
    node_type: setting
    type: integer
    default: 10
    tags:
    - full-agent-only:true
  clc_runner_server_write_timeout:
    node_type: setting
    type: integer
    default: 15
    tags:
    - full-agent-only:true
  cloud_foundry:
    node_type: setting
    type: boolean
    default: false
  cloud_foundry_buildpack:
    node_type: setting
    type: boolean
    default: false
  cloud_foundry_container_tagger:
    node_type: section
    type: object
    properties:
      retry_count:
        node_type: setting
        type: integer
        default: 10
      retry_interval:
        node_type: setting
        type: integer
        default: 10
      shell_path:
        node_type: setting
        type: string
        default: /bin/sh
        comment: Cloud Foundry Container Tagger
    tags:
    - full-agent-only:true
  cluster_trust_chain:
    node_type: section
    type: object
    properties:
      ca_cert_file_path:
        node_type: setting
        type: string
        default: ''
        comment: Path to the cluster CA certificate file.
      ca_key_file_path:
        node_type: setting
        type: string
        default: ''
        comment: Path to the cluster CA key file.
      enable_tls_verification:
        node_type: setting
        type: boolean
        default: false
        comment: Check that the trust chain is valid for Agent cross-node communications
          (NodeAgent->DCA / CLC->DCA / DCA->CLC).
    tags:
    - full-agent-only:true
  cmd:
    node_type: section
    type: object
    properties:
      check:
        node_type: section
        type: object
        properties:
          fullsketches:
            node_type: setting
            type: boolean
            default: false
            tags:
            - no-env
            comment: command line options
  cmd_host:
    node_type: setting
    type: string
    default: localhost
  collect_ccrid:
    node_type: setting
    type: boolean
    default: true
    tags:
    - full-agent-only:true
  conf_path:
    node_type: setting
    type: string
    default: ${conf_path}
  config_files_discovery:
    node_type: section
    type: object
    properties:
      enabled:
        node_type: setting
        type: boolean
        default: false
        comment: Config files discovery
      forwarder:
        node_type: section
        type: object
        properties:
          additional_endpoints:
            node_type: setting
            type: array
            default: []
            items:
              type: object
          batch_max_concurrent_send:
            node_type: setting
            type: integer
            default: 0
          batch_max_content_size:
            node_type: setting
            type: integer
            default: 5000000
          batch_max_size:
            node_type: setting
            type: integer
            default: 1000
          batch_wait:
            node_type: setting
            type: number
            default: 5
            tags:
            - golang_type:float64
          compression_kind:
            node_type: setting
            type: string
            default: zstd
          compression_level:
            node_type: setting
            type: integer
            default: 6
          connection_reset_interval:
            node_type: setting
            type: integer
            default: 0
          dd_url:
            node_type: setting
            type: string
            default: ''
          dev_mode_no_ssl:
            node_type: setting
            type: boolean
            default: false
            tags:
            - no-env
          input_chan_size:
            node_type: setting
            type: integer
            default: 100
          logs_dd_url:
            node_type: setting
            type: string
            default: ''
          logs_no_ssl:
            node_type: setting
            type: boolean
            default: false
          sender_backoff_base:
            node_type: setting
            type: number
            default: 1
            tags:
            - golang_type:float64
          sender_backoff_factor:
            node_type: setting
            type: number
            default: 2
            tags:
            - golang_type:float64
          sender_backoff_max:
            node_type: setting
            type: number
            default: 120
            tags:
            - golang_type:float64
          sender_recovery_interval:
            node_type: setting
            type: integer
            default: 2
          sender_recovery_reset:
            node_type: setting
            type: boolean
            default: false
          use_compression:
            node_type: setting
            type: boolean
            default: true
          use_v2_api:
            node_type: setting
            type: boolean
            default: true
          zstd_compression_level:
            node_type: setting
            type: integer
            default: 1
  container_exclude:
    node_type: setting
    type: array
    default: []
    items:
      type: string
  container_exclude_logs:
    node_type: setting
    type: array
    default: []
    items:
      type: string
  container_exclude_metrics:
    node_type: setting
    type: array
    default: []
    items:
      type: string
  container_exclude_stopped_age:
    node_type: setting
    type: integer
    default: 22
    comment: in hours
  container_image:
    $ref: container_image.yaml
  container_include:
    node_type: setting
    type: array
    default: []
    items:
      type: string
  container_include_logs:
    node_type: setting
    type: array
    default: []
    items:
      type: string
  container_include_metrics:
    node_type: setting
    type: array
    default: []
    items:
      type: string
  container_lifecycle:
    $ref: container_lifecycle.yaml
  container_pid_mapper:
    node_type: setting
    type: string
    default: ''
  convert_dd_site_fqdn:
    node_type: section
    type: object
    properties:
      enabled:
        node_type: setting
        type: boolean
        default: true
  core_agent:
    node_type: section
    type: object
    properties:
      enabled:
        node_type: setting
        type: boolean
        default: true
        comment: Core agent (disabled for Error Tracking Standalone, Logs Collection
          Only)
  csi:
    node_type: section
    type: object
    properties:
      driver:
        node_type: setting
        type: string
        default: k8s.csi.datadoghq.com
      enabled:
        node_type: setting
        type: boolean
        default: false
        comment: CSI driver
    tags:
    - full-agent-only:true
  data_observability:
    node_type: section
    type: object
    properties:
      forwarder:
        node_type: section
        type: object
        properties:
          additional_endpoints:
            node_type: setting
            type: array
            default: []
            items:
              type: object
          batch_max_concurrent_send:
            node_type: setting
            type: integer
            default: 0
          batch_max_content_size:
            node_type: setting
            type: integer
            default: 5000000
          batch_max_size:
            node_type: setting
            type: integer
            default: 1000
          batch_wait:
            node_type: setting
            type: number
            default: 5
            tags:
            - golang_type:float64
          compression_kind:
            node_type: setting
            type: string
            default: zstd
          compression_level:
            node_type: setting
            type: integer
            default: 6
          connection_reset_interval:
            node_type: setting
            type: integer
            default: 0
          dd_url:
            node_type: setting
            type: string
            default: ''
          dev_mode_no_ssl:
            node_type: setting
            type: boolean
            default: false
            tags:
            - no-env
          input_chan_size:
            node_type: setting
            type: integer
            default: 100
          logs_dd_url:
            node_type: setting
            type: string
            default: ''
          logs_no_ssl:
            node_type: setting
            type: boolean
            default: false
          sender_backoff_base:
            node_type: setting
            type: number
            default: 1
            tags:
            - golang_type:float64
          sender_backoff_factor:
            node_type: setting
            type: number
            default: 2
            tags:
            - golang_type:float64
          sender_backoff_max:
            node_type: setting
            type: number
            default: 120
            tags:
            - golang_type:float64
          sender_recovery_interval:
            node_type: setting
            type: integer
            default: 2
          sender_recovery_reset:
            node_type: setting
            type: boolean
            default: false
          use_compression:
            node_type: setting
            type: boolean
            default: true
          use_v2_api:
            node_type: setting
            type: boolean
            default: true
          zstd_compression_level:
            node_type: setting
            type: integer
            default: 1
  data_plane:
    node_type: section
    type: object
    properties:
      api_listen_address:
        node_type: setting
        type: string
        default: tcp://0.0.0.0:5100
        comment: Listen addresses must include a URL scheme (e.g. "tcp://").
      dogstatsd:
        node_type: section
        type: object
        properties:
          aggregator_tag_filter_cache_capacity:
            node_type: setting
            type: integer
            default: 100000
            comment: ADP can cache more efficiently so we use a higher default
          enabled:
            node_type: setting
            type: boolean
            default: true
      enabled:
        node_type: setting
        type: boolean
        default: false
      log_file:
        node_type: setting
        type: string
        default: ${log_path}/agent-data-plane.log
      otlp:
        node_type: section
        type: object
        properties:
          enabled:
            node_type: setting
            type: boolean
            default: false
          proxy:
            node_type: section
            type: object
            properties:
              enabled:
                node_type: setting
                type: boolean
                default: false
              logs:
                node_type: section
                type: object
                properties:
                  enabled:
                    node_type: setting
                    type: boolean
                    default: true
              metrics:
                node_type: section
                type: object
                properties:
                  enabled:
                    node_type: setting
                    type: boolean
                    default: true
              receiver:
                node_type: section
                type: object
                properties:
                  protocols:
                    node_type: section
                    type: object
                    properties:
                      grpc:
                        node_type: section
                        type: object
                        properties:
                          endpoint:
                            node_type: setting
                            type: string
                            default: 127.0.0.1:4319
                            comment: When the ADP OTLP proxy is enabled, ADP owns
                              the gRPC endpoint configured for the receiver (default
                              :4317) and the core agent uses the endpoint below
              traces:
                node_type: section
                type: object
                properties:
                  enabled:
                    node_type: setting
                    type: boolean
                    default: true
      remote_agent_enabled:
        node_type: setting
        type: boolean
        default: true
      secure_api_listen_address:
        node_type: setting
        type: string
        default: tcp://0.0.0.0:5101
      serializer_zstd_compressor_level:
        node_type: setting
        type: integer
        default: 3
        comment: |-
          ADP-specific zstd compression level, distinct from the core Agent's serializer_zstd_compressor_level
          (default 1). ADP defaults to 3 for ~6% smaller payloads without a net CPU increase, since ADP is
          more efficient than the Agent. Forwarded to ADP over the config stream.
      stop_timeout:
        node_type: setting
        type: integer
        default: 4
        comment: |-
          4 matches aggregator_stop_timeout + forwarder_stop_timeout (each defaults to 2 in seconds).
          ComputeDataPlaneStopTimeout (post-load override) recomputes this at runtime so it tracks
          any user-set values for aggregator_stop_timeout / forwarder_stop_timeout.
      telemetry_enabled:
        node_type: setting
        type: boolean
        default: false
      telemetry_listen_addr:
        node_type: setting
        type: string
        default: tcp://0.0.0.0:5102
      use_new_config_stream_endpoint:
        node_type: setting
        type: boolean
        default: true
    tags:
    - full-agent-only:true
  data_streams:
    node_type: section
    type: object
    properties:
      forwarder:
        node_type: section
        type: object
        properties:
          additional_endpoints:
            node_type: setting
            type: array
            default: []
            items:
              type: object
          batch_max_concurrent_send:
            node_type: setting
            type: integer
            default: 0
          batch_max_content_size:
            node_type: setting
            type: integer
            default: 5000000
          batch_max_size:
            node_type: setting
            type: integer
            default: 1000
          batch_wait:
            node_type: setting
            type: number
            default: 0.1
            tags:
            - golang_type:float64
            comment: 100ms for low-latency forwarding
          compression_kind:
            node_type: setting
            type: string
            default: zstd
          compression_level:
            node_type: setting
            type: integer
            default: 6
          connection_reset_interval:
            node_type: setting
            type: integer
            default: 0
          dd_url:
            node_type: setting
            type: string
            default: ''
          dev_mode_no_ssl:
            node_type: setting
            type: boolean
            default: false
            tags:
            - no-env
          input_chan_size:
            node_type: setting
            type: integer
            default: 100
          logs_dd_url:
            node_type: setting
            type: string
            default: ''
          logs_no_ssl:
            node_type: setting
            type: boolean
            default: false
          sender_backoff_base:
            node_type: setting
            type: number
            default: 1
            tags:
            - golang_type:float64
          sender_backoff_factor:
            node_type: setting
            type: number
            default: 2
            tags:
            - golang_type:float64
          sender_backoff_max:
            node_type: setting
            type: number
            default: 120
            tags:
            - golang_type:float64
          sender_recovery_interval:
            node_type: setting
            type: integer
            default: 2
          sender_recovery_reset:
            node_type: setting
            type: boolean
            default: false
          use_compression:
            node_type: setting
            type: boolean
            default: true
          use_v2_api:
            node_type: setting
            type: boolean
            default: true
          zstd_compression_level:
            node_type: setting
            type: integer
            default: 1
  database_monitoring:
    node_type: section
    type: object
    properties:
      activity:
        node_type: section
        type: object
        properties:
          additional_endpoints:
            node_type: setting
            type: array
            default: []
            items:
              type: object
          batch_max_concurrent_send:
            node_type: setting
            type: integer
            default: 0
          batch_max_content_size:
            node_type: setting
            type: integer
            default: 5000000
          batch_max_size:
            node_type: setting
            type: integer
            default: 1000
          batch_wait:
            node_type: setting
            type: number
            default: 5
            tags:
            - golang_type:float64
          compression_kind:
            node_type: setting
            type: string
            default: zstd
          compression_level:
            node_type: setting
            type: integer
            default: 6
          connection_reset_interval:
            node_type: setting
            type: integer
            default: 0
          dd_url:
            node_type: setting
            type: string
            default: ''
          dev_mode_no_ssl:
            node_type: setting
            type: boolean
            default: false
            tags:
            - no-env
          input_chan_size:
            node_type: setting
            type: integer
            default: 100
          logs_dd_url:
            node_type: setting
            type: string
            default: ''
          logs_no_ssl:
            node_type: setting
            type: boolean
            default: false
          sender_backoff_base:
            node_type: setting
            type: number
            default: 1
            tags:
            - golang_type:float64
          sender_backoff_factor:
            node_type: setting
            type: number
            default: 2
            tags:
            - golang_type:float64
          sender_backoff_max:
            node_type: setting
            type: number
            default: 120
            tags:
            - golang_type:float64
          sender_recovery_interval:
            node_type: setting
            type: integer
            default: 2
          sender_recovery_reset:
            node_type: setting
            type: boolean
            default: false
          use_compression:
            node_type: setting
            type: boolean
            default: true
          use_v2_api:
            node_type: setting
            type: boolean
            default: true
          zstd_compression_level:
            node_type: setting
            type: integer
            default: 1
      autodiscovery:
        node_type: section
        type: object
        properties:
          aurora:
            node_type: section
            type: object
            properties:
              dbm_tag:
                node_type: setting
                type: string
                default: datadoghq.com/dbm:true
              discovery_interval:
                node_type: setting
                type: integer
                default: 300
              enabled:
                node_type: setting
                type: boolean
                default: false
              global_view_db_tag:
                node_type: setting
                type: string
                default: datadoghq.com/global_view_db
              query_timeout:
                node_type: setting
                type: integer
                default: 10
              region:
                node_type: setting
                type: string
                default: ''
              tags:
                node_type: setting
                type: array
                default:
                - datadoghq.com/scrape:true
                items:
                  type: string
          rds:
            node_type: section
            type: object
            properties:
              dbm_tag:
                node_type: setting
                type: string
                default: datadoghq.com/dbm:true
              discovery_interval:
                node_type: setting
                type: integer
                default: 300
              enabled:
                node_type: setting
                type: boolean
                default: false
              global_view_db_tag:
                node_type: setting
                type: string
                default: datadoghq.com/global_view_db
              query_timeout:
                node_type: setting
                type: integer
                default: 10
              region:
                node_type: setting
                type: string
                default: ''
              tags:
                node_type: setting
                type: array
                default:
                - datadoghq.com/scrape:true
                items:
                  type: string
      metrics:
        node_type: section
        type: object
        properties:
          additional_endpoints:
            node_type: setting
            type: array
            default: []
            items:
              type: object
          batch_max_concurrent_send:
            node_type: setting
            type: integer
            default: 0
          batch_max_content_size:
            node_type: setting
            type: integer
            default: 5000000
          batch_max_size:
            node_type: setting
            type: integer
            default: 1000
          batch_wait:
            node_type: setting
            type: number
            default: 5
            tags:
            - golang_type:float64
          compression_kind:
            node_type: setting
            type: string
            default: zstd
          compression_level:
            node_type: setting
            type: integer
            default: 6
          connection_reset_interval:
            node_type: setting
            type: integer
            default: 0
          dd_url:
            node_type: setting
            type: string
            default: ''
          dev_mode_no_ssl:
            node_type: setting
            type: boolean
            default: false
            tags:
            - no-env
          input_chan_size:
            node_type: setting
            type: integer
            default: 100
          logs_dd_url:
            node_type: setting
            type: string
            default: ''
          logs_no_ssl:
            node_type: setting
            type: boolean
            default: false
          sender_backoff_base:
            node_type: setting
            type: number
            default: 1
            tags:
            - golang_type:float64
          sender_backoff_factor:
            node_type: setting
            type: number
            default: 2
            tags:
            - golang_type:float64
          sender_backoff_max:
            node_type: setting
            type: number
            default: 120
            tags:
            - golang_type:float64
          sender_recovery_interval:
            node_type: setting
            type: integer
            default: 2
          sender_recovery_reset:
            node_type: setting
            type: boolean
            default: false
          use_compression:
            node_type: setting
            type: boolean
            default: true
          use_v2_api:
            node_type: setting
            type: boolean
            default: true
          zstd_compression_level:
            node_type: setting
            type: integer
            default: 1
      samples:
        node_type: section
        type: object
        properties:
          additional_endpoints:
            node_type: setting
            type: array
            default: []
            items:
              type: object
          batch_max_concurrent_send:
            node_type: setting
            type: integer
            default: 0
          batch_max_content_size:
            node_type: setting
            type: integer
            default: 5000000
          batch_max_size:
            node_type: setting
            type: integer
            default: 1000
          batch_wait:
            node_type: setting
            type: number
            default: 5
            tags:
            - golang_type:float64
          compression_kind:
            node_type: setting
            type: string
            default: zstd
          compression_level:
            node_type: setting
            type: integer
            default: 6
          connection_reset_interval:
            node_type: setting
            type: integer
            default: 0
          dd_url:
            node_type: setting
            type: string
            default: ''
          dev_mode_no_ssl:
            node_type: setting
            type: boolean
            default: false
            tags:
            - no-env
          input_chan_size:
            node_type: setting
            type: integer
            default: 100
          logs_dd_url:
            node_type: setting
            type: string
            default: ''
          logs_no_ssl:
            node_type: setting
            type: boolean
            default: false
          sender_backoff_base:
            node_type: setting
            type: number
            default: 1
            tags:
            - golang_type:float64
          sender_backoff_factor:
            node_type: setting
            type: number
            default: 2
            tags:
            - golang_type:float64
          sender_backoff_max:
            node_type: setting
            type: number
            default: 120
            tags:
            - golang_type:float64
          sender_recovery_interval:
            node_type: setting
            type: integer
            default: 2
          sender_recovery_reset:
            node_type: setting
            type: boolean
            default: false
          use_compression:
            node_type: setting
            type: boolean
            default: true
          use_v2_api:
            node_type: setting
            type: boolean
            default: true
          zstd_compression_level:
            node_type: setting
            type: integer
            default: 1
  default_integration_http_timeout:
    node_type: setting
    type: integer
    default: 9
  delegated_auth:
    node_type: section
    type: object
    properties:
      aws:
        node_type: section
        type: object
        properties:
          region:
            node_type: setting
            type: string
            default: ''
      org_uuid:
        node_type: setting
        type: string
        default: ''
      provider:
        node_type: setting
        type: string
        default: ''
      refresh_interval_mins:
        node_type: setting
        type: integer
        default: 60
  disable_unsafe_yaml:
    node_type: setting
    type: boolean
    default: true
    tags:
    - full-agent-only:true
    comment: Defaults to safe YAML methods in base and custom checks.
  disk_check:
    node_type: section
    type: object
    properties:
      use_core_loader:
        node_type: setting
        type: boolean
        default: true
    tags:
    - full-agent-only:true
  djm_config:
    node_type: section
    type: object
    properties:
      enabled:
        node_type: setting
        type: boolean
        default: false
        comment: Data Jobs Monitoring config
    tags:
    - full-agent-only:true
  dogstatsd_capture_depth:
    node_type: setting
    type: integer
    default: 0
    comment: |-
      Depth of the channel the capture writer reads before persisting to disk.
      Default is 0 - blocking channel
  dogstatsd_capture_path:
    node_type: setting
    type: string
    default: ''
    comment: Location to store dogstatsd captures by default
  dogstatsd_context_expiry_seconds:
    node_type: setting
    type: integer
    default: 20
    comment: Control how long we keep dogstatsd contexts in memory.
  dogstatsd_disable_verbose_logs:
    node_type: setting
    type: boolean
    default: false
    comment: Sends Dogstatsd parse errors to the Debug level instead of the Error
      level
  dogstatsd_eol_required:
    node_type: setting
    type: array
    default: []
    items:
      type: string
    comment: 'Options are: udp, uds, named_pipe'
  dogstatsd_experimental_http:
    node_type: section
    type: object
    properties:
      enabled:
        node_type: setting
        type: boolean
        default: false
      listen_address:
        node_type: setting
        type: string
        default: 127.0.0.1:8125
  dogstatsd_expiry_seconds:
    node_type: setting
    type: integer
    default: 300
    comment: Control for how long counter would be sampled to 0 if not received
  dogstatsd_flush_incomplete_buckets:
    node_type: setting
    type: boolean
    default: false
  dogstatsd_host_socket_path:
    node_type: setting
    type: string
    default: /var/run/datadog
    tags:
    - full-agent-only:true
  dogstatsd_log_file:
    node_type: setting
    type: string
    default: ${log_path}/dogstatsd_info/dogstatsd-stats.log
    comment: Control how dogstatsd-stats logs can be generated
  dogstatsd_log_file_max_rolls:
    node_type: setting
    type: integer
    default: 3
  dogstatsd_mem_based_rate_limiter:
    node_type: section
    type: object
    properties:
      enabled:
        node_type: setting
        type: boolean
        default: false
        comment: To enable the following feature, GODEBUG must contain `madvdontneed=1`
      go_gc:
        node_type: setting
        type: integer
        default: 1
        comment: 0 means don't call SetGCPercent
      high_soft_limit:
        node_type: setting
        type: number
        default: 0.8
        tags:
        - golang_type:float64
      low_soft_limit:
        node_type: setting
        type: number
        default: 0.7
        tags:
        - golang_type:float64
      memory_ballast:
        node_type: setting
        type: integer
        default: 8589934592
        tags:
        - golang_type:int64
      rate_check:
        node_type: section
        type: object
        properties:
          factor:
            node_type: setting
            type: integer
            default: 2
          max:
            node_type: setting
            type: integer
            default: 1
          min:
            node_type: setting
            type: number
            default: 0.01
            tags:
            - golang_type:float64
      soft_limit_freeos_check:
        node_type: section
        type: object
        properties:
          factor:
            node_type: setting
            type: number
            default: 1.5
            tags:
            - golang_type:float64
          max:
            node_type: setting
            type: number
            default: 0.1
            tags:
            - golang_type:float64
          min:
            node_type: setting
            type: number
            default: 0.01
            tags:
            - golang_type:float64
  dogstatsd_origin_optout_enabled:
    node_type: setting
    type: boolean
    default: true
  dogstatsd_packet_buffer_flush_timeout:
    node_type: setting
    type: string
    default: 100ms
    format: duration
    tags:
    - golang_type:duration
  dogstatsd_packet_buffer_size:
    node_type: setting
    type: integer
    default: 32
  dogstatsd_pipe_name:
    node_type: setting
    type: string
    default: ''
  dogstatsd_pipeline_autoadjust:
    node_type: setting
    type: boolean
    default: false
  dogstatsd_pipeline_count:
    node_type: setting
    type: integer
    default: 1
  dogstatsd_stream_log_too_big:
    node_type: setting
    type: boolean
    default: false
  dogstatsd_string_interner_size:
    node_type: setting
    type: integer
    default: 4096
  dogstatsd_telemetry_enabled_listener_id:
    node_type: setting
    type: boolean
    default: false
  dogstatsd_windows_pipe_security_descriptor:
    node_type: setting
    type: string
    default: D:AI(A;;GA;;;WD)
    comment: |-
      https://learn.microsoft.com/en-us/windows/win32/secauthz/security-descriptor-string-format
      https://learn.microsoft.com/en-us/windows/win32/secauthz/ace-strings
      https://learn.microsoft.com/en-us/windows/win32/secauthz/sid-strings

      D:dacl_flags(ace_type;ace_flags;rights;object_guid;inherit_object_guid;account_sid;(resource_attribute))
      dacl_flags:
      "AI": SDDL_AUTO_INHERITED
      ace_type:
      "A": SDDL_ACCESS_ALLOWED
      rights:
      "GA": SDDL_GENERIC_ALL
      account_sid:
      "WD": Everyone
  dogstatsd_workers_count:
    node_type: setting
    type: integer
    default: 0
    comment: Force the amount of dogstatsd workers (mainly used for benchmarks or
      some very specific use-case)
  ec2_imdsv2_transition_payload_enabled:
    node_type: setting
    type: boolean
    default: true
    tags:
    - full-agent-only:true
  ec2_metadata_token_lifetime:
    node_type: setting
    type: integer
    default: 21600
    tags:
    - full-agent-only:true
    comment: value in seconds
  ec2_use_dmi:
    node_type: setting
    type: boolean
    default: true
    tags:
    - full-agent-only:true
    comment: should the agent leverage DMI information to know if it's running on
      EC2 or not. Enabling this will add the instance ID from DMI to the host alias
      list.
  ec2_use_windows_prefix_detection:
    node_type: setting
    type: boolean
    default: false
    tags:
    - full-agent-only:true
    comment: EC2
  ecs_metadata_retry_initial_interval:
    node_type: setting
    type: string
    default: 100ms
    format: duration
    tags:
    - golang_type:duration
    - full-agent-only:true
  ecs_metadata_retry_max_elapsed_time:
    node_type: setting
    type: string
    default: 3s
    format: duration
    tags:
    - golang_type:duration
    - full-agent-only:true
  ecs_metadata_retry_timeout_factor:
    node_type: setting
    type: integer
    default: 3
    tags:
    - full-agent-only:true
  ecs_task_cache_ttl:
    node_type: setting
    type: string
    default: 3m0s
    format: duration
    tags:
    - golang_type:duration
    - full-agent-only:true
  ecs_task_collection_burst:
    node_type: setting
    type: integer
    default: 60
    tags:
    - full-agent-only:true
  ecs_task_collection_rate:
    node_type: setting
    type: integer
    default: 35
    tags:
    - full-agent-only:true
  eks_fargate:
    node_type: setting
    type: boolean
    default: false
  enable_cluster_agent_metadata_collection:
    node_type: setting
    type: boolean
    default: true
  enable_json_stream_shared_compressor_buffers:
    node_type: setting
    type: boolean
    default: true
  enable_payloads:
    node_type: section
    type: object
    properties:
      events:
        node_type: setting
        type: boolean
        default: true
        comment: 'Serializer: allow user to blacklist any kind of payload to be sent'
      json_to_v1_intake:
        node_type: setting
        type: boolean
        default: true
      series:
        node_type: setting
        type: boolean
        default: true
      service_checks:
        node_type: setting
        type: boolean
        default: true
      sketches:
        node_type: setting
        type: boolean
        default: true
  enabled_rfc1123_compliant_cluster_name_tag:
    node_type: setting
    type: boolean
    default: true
    tags:
    - full-agent-only:true
  enhanced_metrics:
    node_type: setting
    type: boolean
    default: true
    env_vars:
    - DD_ENHANCED_METRICS_ENABLED
  entity_id:
    node_type: setting
    type: string
    default: ''
    tags:
    - no-env
    comment: the entity id, typically set by dca admisson controller config mutator,
      used for external origin detection
  event_management:
    node_type: section
    type: object
    properties:
      forwarder:
        node_type: section
        type: object
        properties:
          additional_endpoints:
            node_type: setting
            type: array
            default: []
            items:
              type: object
          batch_max_concurrent_send:
            node_type: setting
            type: integer
            default: 0
          batch_max_content_size:
            node_type: setting
            type: integer
            default: 5000000
          batch_max_size:
            node_type: setting
            type: integer
            default: 1000
          batch_wait:
            node_type: setting
            type: number
            default: 5
            tags:
            - golang_type:float64
          compression_kind:
            node_type: setting
            type: string
            default: zstd
          compression_level:
            node_type: setting
            type: integer
            default: 6
          connection_reset_interval:
            node_type: setting
            type: integer
            default: 0
          dd_url:
            node_type: setting
            type: string
            default: ''
          dev_mode_no_ssl:
            node_type: setting
            type: boolean
            default: false
            tags:
            - no-env
          input_chan_size:
            node_type: setting
            type: integer
            default: 100
          logs_dd_url:
            node_type: setting
            type: string
            default: ''
          logs_no_ssl:
            node_type: setting
            type: boolean
            default: false
          sender_backoff_base:
            node_type: setting
            type: number
            default: 1
            tags:
            - golang_type:float64
          sender_backoff_factor:
            node_type: setting
            type: number
            default: 2
            tags:
            - golang_type:float64
          sender_backoff_max:
            node_type: setting
            type: number
            default: 120
            tags:
            - golang_type:float64
          sender_recovery_interval:
            node_type: setting
            type: integer
            default: 2
          sender_recovery_reset:
            node_type: setting
            type: boolean
            default: false
          use_compression:
            node_type: setting
            type: boolean
            default: true
          use_v2_api:
            node_type: setting
            type: boolean
            default: true
          zstd_compression_level:
            node_type: setting
            type: integer
            default: 1
  evp_proxy_config:
    node_type: section
    type: object
    properties:
      additional_endpoints:
        node_type: setting
        type: object
        default: {}
        additionalProperties:
          items:
            type: string
          type: array
      api_key:
        node_type: setting
        type: string
        default: ''
      dd_url:
        node_type: setting
        type: string
        default: ''
      delegated_auth:
        node_type: section
        type: object
        properties:
          aws:
            node_type: section
            type: object
            properties:
              region:
                node_type: setting
                type: string
                default: ''
          org_uuid:
            node_type: setting
            type: string
            default: ''
          provider:
            node_type: setting
            type: string
            default: ''
          refresh_interval_mins:
            node_type: setting
            type: integer
            default: 60
      enabled:
        node_type: setting
        type: boolean
        default: true
        comment: |-
          trace-agent's evp_proxy. Registered here (in setupAPM, which is part of
          initCommonConfigComponents) so the defaults are reachable under both the
          regular and `serverless` build tags. comp/trace/config reads these
          unconditionally; previously the defaults lived only in initCoreAgentFull
          and silently became false under serverless.
      max_payload_size:
        node_type: setting
        type: integer
        default: 10485760
        tags:
        - golang_type:int64
      receiver_timeout:
        node_type: setting
        type: integer
        default: 0
  expected_tags_duration:
    node_type: setting
    type: string
    default: 0s
    format: duration
    tags:
    - golang_type:duration
    comment: Duration during which the host tags will be submitted with metrics.
  external_metrics:
    node_type: section
    type: object
    properties:
      aggregator:
        node_type: setting
        type: string
        default: avg
        comment: aggregator used for the external metrics. Choose from [avg,sum,max,min]
    tags:
    - full-agent-only:true
  external_metrics_provider:
    $ref: external_metrics_provider.yaml
  flare:
    node_type: section
    type: object
    properties:
      profile_overhead_runtime:
        node_type: setting
        type: string
        default: 10s
        format: duration
        tags:
        - golang_type:duration
      rc_profiling:
        node_type: section
        type: object
        properties:
          blocking_rate:
            node_type: setting
            type: integer
            default: 0
          mutex_fraction:
            node_type: setting
            type: integer
            default: 0
          profile_duration:
            node_type: setting
            type: string
            default: 30s
            format: duration
            tags:
            - golang_type:duration
      rc_streamlogs:
        node_type: section
        type: object
        properties:
          duration:
            node_type: setting
            type: string
            default: 1m0s
            format: duration
            tags:
            - golang_type:duration
    tags:
    - full-agent-only:true
  flare_provider_timeout:
    node_type: setting
    type: string
    default: 10s
    format: duration
    tags:
    - golang_type:duration
    - full-agent-only:true
    comment: flare configs
  flare_stripped_keys:
    node_type: setting
    type: array
    default: []
    items:
      type: string
    comment: Yaml keys which values are stripped from flare
  fleet_layers:
    node_type: setting
    type: array
    default: []
    items:
      type: string
    tags:
    - no-env
  fleet_policies_dir:
    node_type: setting
    type: string
    default: ''
    comment: Fleet policies
  forwarder_apikey_validation_interval:
    node_type: setting
    type: integer
    default: 60
    comment: in minutes
  forwarder_backoff_factor:
    node_type: setting
    type: integer
    default: 2
    comment: Forwarder retry settings
  forwarder_connection_reset_interval:
    node_type: setting
    type: integer
    default: 0
    comment: in seconds, 0 means disabled
  forwarder_flush_to_disk_mem_ratio:
    node_type: setting
    type: number
    default: 0.5
    tags:
    - golang_type:float64
  forwarder_recovery_interval:
    node_type: setting
    type: integer
    default: 2
  forwarder_recovery_reset:
    node_type: setting
    type: boolean
    default: false
  forwarder_retry_queue_capacity_time_interval_sec:
    node_type: setting
    type: integer
    default: 900
    comment: 15 mins
  forwarder_retry_queue_max_size:
    node_type: setting
    type: integer
    default: 0
    comment: Deprecated in favor of `forwarder_retry_queue_payloads_max_size`
  forwarder_stop_wait_for_inflight:
    node_type: setting
    type: boolean
    default: false
    comment: |-
      forwarder_stop_wait_for_inflight controls whether Worker.Stop waits for
      in-flight HTTP transactions to finish before returning (true) or cancels
      them immediately (false).
  forwarder_storage_path:
    node_type: setting
    type: string
    default: ${run_path}/transactions_to_retry
    comment: Forwarder storage on disk
  genresources:
    node_type: section
    type: object
    properties:
      additional_endpoints:
        node_type: setting
        type: array
        default: []
        items:
          type: object
      batch_max_concurrent_send:
        node_type: setting
        type: integer
        default: 0
      batch_max_content_size:
        node_type: setting
        type: integer
        default: 5000000
      batch_max_size:
        node_type: setting
        type: integer
        default: 1000
      batch_wait:
        node_type: setting
        type: number
        default: 5
        tags:
        - golang_type:float64
      compression_kind:
        node_type: setting
        type: string
        default: zstd
      compression_level:
        node_type: setting
        type: integer
        default: 6
      connection_reset_interval:
        node_type: setting
        type: integer
        default: 0
      dd_url:
        node_type: setting
        type: string
        default: ''
      dev_mode_no_ssl:
        node_type: setting
        type: boolean
        default: false
        tags:
        - no-env
      input_chan_size:
        node_type: setting
        type: integer
        default: 100
      logs_dd_url:
        node_type: setting
        type: string
        default: ''
      logs_no_ssl:
        node_type: setting
        type: boolean
        default: false
      sender_backoff_base:
        node_type: setting
        type: number
        default: 1
        tags:
        - golang_type:float64
      sender_backoff_factor:
        node_type: setting
        type: number
        default: 2
        tags:
        - golang_type:float64
      sender_backoff_max:
        node_type: setting
        type: number
        default: 120
        tags:
        - golang_type:float64
      sender_recovery_interval:
        node_type: setting
        type: integer
        default: 2
      sender_recovery_reset:
        node_type: setting
        type: boolean
        default: false
      use_compression:
        node_type: setting
        type: boolean
        default: true
      use_v2_api:
        node_type: setting
        type: boolean
        default: true
      zstd_compression_level:
        node_type: setting
        type: integer
        default: 1
  go_core_dump:
    node_type: setting
    type: boolean
    default: false
  health_platform:
    node_type: section
    type: object
    properties:
      enabled:
        node_type: setting
        type: boolean
        default: true
      forwarder:
        node_type: section
        type: object
        properties:
          interval:
            node_type: setting
            type: string
            default: 15m0s
            format: duration
            tags:
            - golang_type:duration
      invalidconfig_check:
        node_type: section
        type: object
        properties:
          enabled:
            node_type: setting
            type: boolean
            default: true
      invalidsysprobeconfig_check:
        node_type: section
        type: object
        properties:
          enabled:
            node_type: setting
            type: boolean
            default: true
      persist_on_kubernetes:
        node_type: setting
        type: boolean
        default: false
  heroku_dyno:
    node_type: setting
    type: boolean
    default: false
    tags:
    - full-agent-only:true
    comment: overridden in Heroku buildpack
  hostname_drift_initial_delay:
    node_type: setting
    type: string
    default: 20m0s
    format: duration
    tags:
    - golang_type:duration
    - full-agent-only:true
    comment: |-
      Internal hostname drift detection configuration
      These options are not exposed to customers and are used for testing purposes
  hostname_drift_recurring_interval:
    node_type: setting
    type: string
    default: 6h0m0s
    format: duration
    tags:
    - golang_type:duration
    - full-agent-only:true
  hostname_force_config_as_canonical:
    node_type: setting
    type: boolean
    default: false
    tags:
    - full-agent-only:true
    comment: |-
      When enabled, hostname defined in the configuration (datadog.yaml) and starting with `ip-` or `domu` on EC2 is used as
      canonical hostname, otherwise the instance-id is used as canonical hostname.
  hostprofiler:
    node_type: section
    type: object
    properties:
      additional_http_headers:
        node_type: setting
        type: object
        default: {}
        additionalProperties:
          type: string
      ddprofiling:
        node_type: section
        type: object
        properties:
          enabled:
            node_type: setting
            type: boolean
            default: false
          period:
            node_type: setting
            type: integer
            default: 0
          port:
            node_type: setting
            type: integer
            default: 0
      debug:
        node_type: section
        type: object
        properties:
          verbosity:
            node_type: setting
            type: string
            default: ''
            comment: Host Profiler config
      health_metrics:
        node_type: section
        type: object
        properties:
          enabled:
            node_type: setting
            type: boolean
            default: true
          target:
            node_type: setting
            type: string
            default: 127.0.0.1:8889
      hpflare:
        node_type: section
        type: object
        properties:
          port:
            node_type: setting
            type: integer
            default: 7778
    tags:
    - full-agent-only:true
  hpa_configmap_name:
    node_type: setting
    type: string
    default: datadog-custom-metrics
    tags:
    - full-agent-only:true
  hpa_watcher_gc_period:
    node_type: setting
    type: integer
    default: 300
    tags:
    - full-agent-only:true
    comment: 5 minutes
  hpa_watcher_polling_freq:
    node_type: setting
    type: integer
    default: 10
    tags:
    - full-agent-only:true
  http_dial_fallback_delay:
    node_type: setting
    type: string
    default: -1ns
    format: duration
    tags:
    - golang_type:duration
  ibm_metadata_timeout:
    node_type: setting
    type: integer
    default: 5
    tags:
    - full-agent-only:true
    comment: |-
      IBM cloud
      We use a long timeout here since the metadata and token API can be very slow sometimes.
      value in seconds
  ignore_autoconf:
    node_type: setting
    type: array
    default: []
    items:
      type: string
  ignore_host_etc:
    node_type: setting
    type: boolean
    default: false
  include_ephemeral_containers:
    node_type: setting
    type: boolean
    default: false
  installer:
    node_type: section
    type: object
    properties:
      gc_interval:
        node_type: setting
        type: string
        default: 1h0m0s
        format: duration
        tags:
        - golang_type:duration
      mirror:
        node_type: setting
        type: string
        default: ''
      refresh_interval:
        node_type: setting
        type: string
        default: 30s
        format: duration
        tags:
        - golang_type:duration
      registry:
        node_type: section
        type: object
        properties:
          auth:
            node_type: setting
            type: string
            default: ''
          password:
            node_type: setting
            type: string
            default: ''
          url:
            node_type: setting
            type: string
            default: ''
          username:
            node_type: setting
            type: string
            default: ''
    tags:
    - full-agent-only:true
  instrumentation_crd_controller:
    node_type: section
    type: object
    properties:
      enabled:
        node_type: setting
        type: boolean
        default: false
        comment: DatadogInstrumentation controller
    tags:
    - full-agent-only:true
  integration:
    node_type: section
    type: object
    properties:
      additional:
        node_type: setting
        type: array
        default: []
        items:
          type: string
        comment: 'integration.additional: additional checks to allow beyond the default
          set (user configured)'
      basic:
        node_type: section
        type: object
        properties:
          allowed:
            node_type: setting
            type: array
            default:
            - cpu
            - agent_telemetry
            - agentcrashdetect
            - disk
            - directory
            - file_handle
            - filehandles
            - io
            - load
            - memory
            - network
            - ntp
            - process
            - service_discovery
            - snmp
            - cisco_sdwan
            - versa
            - cisco_aci
            - system
            - systemd
            - system_core
            - system_swap
            - telemetry
            - telemetryCheck
            - uptime
            - win32_event_log
            - wincrashdetect
            - winkmem
            - winproc
            - wmi_check
            - windows_certificate
            - windows_performance_counters
            - windows_registry
            - windows_service
            items:
              type: string
            comment: |-
              Infrastructure basic mode section [UNDOCUMENTED]
              Note: All checks starting with "custom_" are always allowed.
              integration.basic.allowed: default allowed checks (internal, should not need user configuration)
      cloud_cost_only:
        node_type: section
        type: object
        properties:
          tagged:
            node_type: setting
            type: array
            default: []
            items:
              type: string
            comment: 'integration.cloud_cost_only.tagged: checks to tag when infrastructure_mode=cloud_cost_only
              (empty means all checks)'
      enabled:
        node_type: setting
        type: boolean
        default: true
      end_user_device:
        node_type: section
        type: object
        properties:
          allowed:
            node_type: setting
            type: array
            default: []
            items:
              type: string
            comment: |-
              Infrastructure end_user_device mode section
              integration.end_user_device.allowed: empty means all checks are allowed
      excluded:
        node_type: setting
        type: array
        default: []
        items:
          type: string
        comment: 'integration.excluded: checks to exclude (user configured)'
      full:
        node_type: section
        type: object
        properties:
          allowed:
            node_type: setting
            type: array
            default: []
            items:
              type: string
            comment: |-
              Infrastructure full mode section (default mode, allows all checks)
              integration.full.allowed: empty means all checks are allowed
  integration_check_status_enabled:
    node_type: setting
    type: boolean
    default: false
  integration_file_paths_allowlist:
    node_type: setting
    type: array
    default: []
    items:
      type: string
    tags:
    - full-agent-only:true
    comment: Allowlisted file paths for untrusted providers (empty = allow all).
  integration_ignore_untrusted_file_params:
    node_type: setting
    type: boolean
    default: false
    tags:
    - full-agent-only:true
    comment: |-
      Integration security
      When enabled, integrations will ignore configuration parameters that refer to file paths
      Ignore file path params from untrusted providers (e.g. labels, annotations) when enabled.
  integration_profiling:
    node_type: setting
    type: boolean
    default: false
  integration_security_excluded_checks:
    node_type: setting
    type: array
    default: []
    items:
      type: string
    tags:
    - full-agent-only:true
    comment: Integrations excluded from these restrictions.
  integration_tracing:
    node_type: setting
    type: boolean
    default: false
  integration_tracing_exhaustive:
    node_type: setting
    type: boolean
    default: false
  integration_trusted_providers:
    node_type: setting
    type: array
    default:
    - file
    - remote-config
    items:
      type: string
    tags:
    - full-agent-only:true
    comment: 'Trusted config providers (others are untrusted). Defaults: file, remote-config.'
  internal_profiling:
    $ref: internal_profiling.yaml
  inventories_checks_configuration_enabled:
    node_type: setting
    type: boolean
    default: true
    tags:
    - full-agent-only:true
    comment: controls the checks configurations
  inventories_collect_cloud_provider_account_id:
    node_type: setting
    type: boolean
    default: true
    tags:
    - full-agent-only:true
    comment: collect collection of `cloud_provider_account_id`
  inventories_diagnostics_enabled:
    node_type: setting
    type: boolean
    default: true
  inventories_enabled:
    node_type: setting
    type: boolean
    default: true
    tags:
    - full-agent-only:true
    comment: inventories
  inventories_first_run_delay:
    node_type: setting
    type: integer
    default: 60
    tags:
    - full-agent-only:true
    comment: Seconds to wait to sent metadata payload to the backend after startup
  inventories_max_interval:
    node_type: setting
    type: integer
    default: 0
    tags:
    - full-agent-only:true
    comment: |-
      when updating the default here also update pkg/metadata/inventories/README.md
      0 == default interval from inventories
  inventories_min_interval:
    node_type: setting
    type: integer
    default: 0
    tags:
    - full-agent-only:true
    comment: 0 == default interval from inventories
  iot_host:
    node_type: setting
    type: boolean
    default: false
    tags:
    - full-agent-only:true
    comment: overridden in IoT Agent main
  ipc_address:
    node_type: setting
    type: string
    default: localhost
    comment: 'deprecated: use `cmd_host` instead'
  ipc_cert_file_path:
    node_type: setting
    type: string
    default: ''
    comment: used to override the path where the IPC cert/key files are stored/retrieved
  jmx_statsd_client_buffer_size:
    node_type: setting
    type: integer
    default: 0
    tags:
    - full-agent-only:true
    comment: the "buffer" here is the socket send buffer (SO_SNDBUF) and the size
      is in bytes
  jmx_statsd_client_queue_size:
    node_type: setting
    type: integer
    default: 4096
    tags:
    - full-agent-only:true
    comment: |-
      The following jmx_statsd_client-* options are internal and will not be documented
      the queue size is the no. of elements (metrics, event, service checks) it can hold.
  jmx_statsd_client_socket_timeout:
    node_type: setting
    type: integer
    default: 0
    tags:
    - full-agent-only:true
    comment: the socket timeout (SO_SNDTIMEO) is in milliseconds
  jmx_statsd_client_use_non_blocking:
    node_type: setting
    type: boolean
    default: false
    tags:
    - full-agent-only:true
  kube_cache_sync_timeout_seconds:
    node_type: setting
    type: integer
    default: 10
    tags:
    - full-agent-only:true
  kube_resources_namespace:
    node_type: setting
    type: string
    default: ''
    tags:
    - full-agent-only:true
  kubeactions:
    node_type: section
    type: object
    properties:
      enabled:
        node_type: setting
        type: boolean
        default: false
        comment: Kubernetes actions
      forwarder:
        node_type: section
        type: object
        properties:
          additional_endpoints:
            node_type: setting
            type: array
            default: []
            items:
              type: object
          batch_max_concurrent_send:
            node_type: setting
            type: integer
            default: 0
          batch_max_content_size:
            node_type: setting
            type: integer
            default: 5000000
          batch_max_size:
            node_type: setting
            type: integer
            default: 1000
          batch_wait:
            node_type: setting
            type: number
            default: 5
            tags:
            - golang_type:float64
          compression_kind:
            node_type: setting
            type: string
            default: zstd
          compression_level:
            node_type: setting
            type: integer
            default: 6
          connection_reset_interval:
            node_type: setting
            type: integer
            default: 0
          dd_url:
            node_type: setting
            type: string
            default: ''
          dev_mode_no_ssl:
            node_type: setting
            type: boolean
            default: false
            tags:
            - no-env
          input_chan_size:
            node_type: setting
            type: integer
            default: 100
          logs_dd_url:
            node_type: setting
            type: string
            default: ''
          logs_no_ssl:
            node_type: setting
            type: boolean
            default: false
          sender_backoff_base:
            node_type: setting
            type: number
            default: 1
            tags:
            - golang_type:float64
          sender_backoff_factor:
            node_type: setting
            type: number
            default: 2
            tags:
            - golang_type:float64
          sender_backoff_max:
            node_type: setting
            type: number
            default: 120
            tags:
            - golang_type:float64
          sender_recovery_interval:
            node_type: setting
            type: integer
            default: 2
          sender_recovery_reset:
            node_type: setting
            type: boolean
            default: false
          use_compression:
            node_type: setting
            type: boolean
            default: true
          use_v2_api:
            node_type: setting
            type: boolean
            default: true
          zstd_compression_level:
            node_type: setting
            type: integer
            default: 1
  kubelet_collector_pull_interval:
    node_type: setting
    type: integer
    default: 0
    comment: not exposed yet. In seconds. 0 means use workloadmeta default
  kubelet_core_check_enabled:
    node_type: setting
    type: boolean
    default: true
  kubelet_use_api_server:
    node_type: setting
    type: boolean
    default: false
  kubernetes_apiserver_client_burst:
    node_type: setting
    type: integer
    default: 200
  kubernetes_apiserver_client_qps:
    node_type: setting
    type: integer
    default: 40
  kubernetes_apiserver_informer_client_timeout:
    node_type: setting
    type: integer
    default: 0
  kubernetes_events_source_detection:
    node_type: section
    type: object
    properties:
      enabled:
        node_type: setting
        type: boolean
        default: false
  kubernetes_informers_resync_period:
    node_type: setting
    type: integer
    default: 300
    tags:
    - full-agent-only:true
    comment: value in seconds. Default to 5 minutes
  kubernetes_kube_service_ignore_readiness:
    node_type: setting
    type: boolean
    default: false
  kubernetes_kubelet_deviceplugins_cache_duration:
    node_type: setting
    type: string
    default: 5s
    format: duration
    tags:
    - golang_type:duration
  kubernetes_kubelet_deviceplugins_socketdir:
    node_type: setting
    type: string
    platform_default:
      windows: \\.\pipe\kubelet-device-plugins
      other: /var/lib/kubelet/device-plugins
  kubernetes_kubelet_nodename:
    node_type: setting
    type: string
    default: ''
  kubernetes_kubelet_podresources_socket:
    node_type: setting
    type: string
    platform_default:
      windows: \\.\pipe\kubelet-pod-resources
      other: /var/lib/kubelet/pod-resources/kubelet.sock
  kubernetes_map_services_on_ip:
    node_type: setting
    type: boolean
    default: false
    comment: temporary opt-out of the new mapping logic
  kubernetes_namespace_annotations_as_tags:
    node_type: setting
    type: object
    default: {}
    additionalProperties:
      type: string
    tags:
    - full-agent-only:true
  kubernetes_node_label_as_cluster_name:
    node_type: setting
    type: string
    default: ''
    tags:
    - full-agent-only:true
  kubernetes_persistent_volume_claims_as_tags:
    node_type: setting
    type: boolean
    default: true
    tags:
    - full-agent-only:true
  kubernetes_resources_annotations_as_tags:
    node_type: setting
    type: string
    default: '{}'
    tags:
    - full-agent-only:true
    comment: |-
      kubernetes_resources_annotations_as_tags should be parseable as map[string]map[string]string
      it maps group resources to annotations as tags maps
      a group resource has the format `{resource}.{group}`, or simply `{resource}` if it belongs to the empty group
      examples of group resources:
      - `deployments.apps`
      - `statefulsets.apps`
      - `pods`
      - `nodes`
  kubernetes_resources_labels_as_tags:
    node_type: setting
    type: string
    default: '{}'
    tags:
    - full-agent-only:true
    comment: |-
      kubernetes_resources_labels_as_tags should be parseable as map[string]map[string]string
      it maps group resources to labels as tags maps
      a group resource has the format `{resource}.{group}`, or simply `{resource}` if it belongs to the empty group
      examples of group resources:
      - `deployments.apps`
      - `statefulsets.apps`
      - `pods`
      - `nodes`
  language_detection:
    node_type: section
    type: object
    properties:
      enabled:
        node_type: setting
        type: boolean
        default: false
        comment: Language Detection
      reporting:
        node_type: section
        type: object
        properties:
          buffer_period:
            node_type: setting
            type: string
            default: 10s
            comment: buffer period represents how frequently newly detected languages
              buffer is flushed by reporting its content to the language detection
              handler in the cluster agent
          enabled:
            node_type: setting
            type: boolean
            default: true
          refresh_period:
            node_type: setting
            type: string
            default: 20m
            comment: TTL refresh period represents how frequently actively detected
              languages are refreshed by reporting them again to the language detection
              handler in the cluster agent
    tags:
    - full-agent-only:true
  leader_election_default_resource:
    node_type: setting
    type: string
    default: configmap
    tags:
    - full-agent-only:true
  leader_election_release_on_shutdown:
    node_type: setting
    type: boolean
    default: true
    tags:
    - full-agent-only:true
  leader_lease_name:
    node_type: setting
    type: string
    default: datadog-leader-election
    tags:
    - full-agent-only:true
  log_enabled:
    node_type: setting
    type: boolean
    default: false
    comment: deprecated, use logs_enabled instead
  log_payloads:
    node_type: setting
    type: boolean
    default: false
    comment: If enabling log_payloads, ensure the log level is set to at least DEBUG
      to be able to see the logs
  logging_frequency:
    node_type: setting
    type: integer
    default: 500
    tags:
    - golang_type:int64
  logon_duration:
    node_type: section
    type: object
    properties:
      enabled:
        node_type: setting
        type: boolean
        default: false
        comment: Logon Duration config (macOS)
  metadata_endpoints_max_hostname_size:
    node_type: setting
    type: integer
    default: 255
    tags:
    - full-agent-only:true
    comment: |-
      Metadata endpoints
      Defines the maximum size of hostame gathered from EC2, GCE, Azure, Alibaba, Oracle and Tencent cloud metadata
      endpoints (all cloudprovider except IBM). IBM cloud ignore this setting as their API return a huge JSON with
      all the metadata for the VM.
      Used internally to protect against configurations where metadata endpoints return incorrect values with 200 status codes.
  metadata_provider_stop_timeout:
    node_type: setting
    type: string
    default: 30s
    format: duration
    tags:
    - golang_type:duration
  metric_filterlist:
    node_type: setting
    type: array
    default: []
    items:
      type: string
    tags:
    - full-agent-only:true
    comment: |-
      Delegated authentication (global)
      Cloud provider and region are auto-detected if not specified
      Enabled automatically when org_uuid is specified
      Filterlist
  metric_filterlist_match_prefix:
    node_type: setting
    type: boolean
    default: false
    tags:
    - full-agent-only:true
  metric_tag_filterlist:
    node_type: setting
    type: array
    default: []
    tags:
    - full-agent-only:true
  metric_tag_filterlist_adp_only:
    node_type: setting
    type: boolean
    default: true
    tags:
    - full-agent-only:true
    comment: |-
      When true (default), metric_tag_filterlist tag stripping is only applied when data_plane.enabled is true.
      Set to false to apply tag stripping regardless of whether ADP is running.
  metrics_port:
    node_type: setting
    type: integer
    default: 5000
    tags:
    - full-agent-only:true
  multi_region_failover:
    $ref: multi_region_failover.yaml
  network:
    node_type: section
    type: object
    properties:
      id:
        node_type: setting
        type: string
        default: ''
        comment: Network
  network_check:
    node_type: section
    type: object
    properties:
      use_core_loader:
        node_type: setting
        type: boolean
        platform_default:
          linux: true
          windows: true
          other: false
    tags:
    - full-agent-only:true
  notable_events:
    node_type: section
    type: object
    properties:
      enabled:
        node_type: setting
        type: boolean
        default: false
        comment: Notable Events (EUDM)
  ol_proxy_config:
    node_type: section
    type: object
    properties:
      additional_endpoints:
        node_type: setting
        type: object
        default: {}
        additionalProperties:
          items:
            type: string
          type: array
      api_key:
        node_type: setting
        type: string
        default: ''
      api_version:
        node_type: setting
        type: integer
        default: 2
      dd_url:
        node_type: setting
        type: string
        default: ''
      delegated_auth:
        node_type: section
        type: object
        properties:
          aws:
            node_type: section
            type: object
            properties:
              region:
                node_type: setting
                type: string
                default: ''
          org_uuid:
            node_type: setting
            type: string
            default: ''
          provider:
            node_type: setting
            type: string
            default: ''
          refresh_interval_mins:
            node_type: setting
            type: integer
            default: 60
      enabled:
        node_type: setting
        type: boolean
        default: true
        comment: trace-agent's ol_proxy. Same rationale as evp_proxy above.
  orchestrator_explorer:
    $ref: orchestrator_explorer.yaml
  origin_detection_unified:
    node_type: setting
    type: boolean
    default: false
    comment: |-
      If enabled, all origin detection mechanisms will be unified to use the same logic.
      Will override all other origin detection settings in favor of the unified one.
  otel_standalone:
    node_type: setting
    type: boolean
    default: false
    tags:
    - full-agent-only:true
    comment: |-
      otel_standalone controls whether otel-agent runs in standalone mode (with full secrets, tagger server)
      or connected mode (expects core agent for secrets and tagger)
  otelcollector:
    $ref: otelcollector.yaml
  prioritize_go_check_loader:
    node_type: setting
    type: boolean
    default: true
    tags:
    - full-agent-only:true
    comment: If true, then the go loader will be prioritized over the python loader.
  proc_root:
    node_type: setting
    type: string
    default: /proc
  prometheus_http_sd:
    node_type: section
    type: object
    properties:
      check_template:
        node_type: setting
        type: string
        default: ''
        comment: '[DEPRECATED] JSON check template applied to each discovered target.
          Use prometheus_http_sd.configs instead.'
      configs:
        node_type: setting
        type: array
        default: []
        env_parser: json
        items:
          type: object
        comment: |-
          Prometheus HTTP Service Discovery
          List of HTTP SD endpoints to poll. Each entry must specify url and check_template.
      url:
        node_type: setting
        type: string
        default: ''
        comment: |-
          DD_PROMETHEUS_HTTP_SD_CONFIGS is a JSON-encoded list-of-objects.
          [DEPRECATED] URL of the Prometheus HTTP SD endpoint. Use prometheus_http_sd.configs instead.
    tags:
    - full-agent-only:true
  provider_kind:
    node_type: setting
    type: string
    default: ''
  python_lazy_loading:
    node_type: setting
    type: boolean
    default: true
    tags:
    - full-agent-only:true
    comment: |-
      If true, Python is loaded when the first Python check is loaded.
      Otherwise, Python is loaded when the collector is initialized.
  remote_agent:
    node_type: section
    type: object
    properties:
      configstream:
        node_type: section
        type: object
        properties:
          consumer:
            node_type: section
            type: object
            properties:
              enabled:
                node_type: setting
                type: boolean
                default: false
          sleep_interval:
            node_type: setting
            type: string
            default: 10s
            format: duration
            tags:
            - golang_type:duration
      registry:
        node_type: section
        type: object
        properties:
          enabled:
            node_type: setting
            type: boolean
            default: true
          idle_timeout:
            node_type: setting
            type: string
            default: 30s
            format: duration
            tags:
            - golang_type:duration
          query_timeout:
            node_type: setting
            type: string
            default: 3s
            format: duration
            tags:
            - golang_type:duration
          recommended_refresh_interval:
            node_type: setting
            type: string
            default: 10s
            format: duration
            tags:
            - golang_type:duration
    tags:
    - full-agent-only:true
  remote_flags:
    node_type: section
    type: object
    properties:
      enabled:
        node_type: setting
        type: boolean
        default: false
  remote_policies:
    node_type: setting
    type: boolean
    default: false
    tags:
    - no-env
    comment: Legacy installer configuration
  remote_tagger:
    node_type: section
    type: object
    properties:
      max_concurrent_sync:
        node_type: setting
        type: integer
        default: 3
        comment: Remote tagger
    tags:
    - full-agent-only:true
  run_path:
    node_type: setting
    type: string
    default: ${run_path}
  runtime_security_config:
    $ref: runtime_security_config.yaml
  secret_audit_file_max_size:
    node_type: setting
    type: integer
    default: 1048576
    tags:
    - full-agent-only:true
  secret_backend_command_allow_group_exec_perm:
    node_type: setting
    type: boolean
    default: false
  security_agent:
    node_type: section
    type: object
    properties:
      cmd_port:
        node_type: setting
        type: integer
        default: 5010
        comment: Datadog security agent (common)
      disable_thp:
        node_type: setting
        type: boolean
        default: true
      expvar_port:
        node_type: setting
        type: integer
        default: 5011
      internal_profiling:
        node_type: section
        type: object
        properties:
          api_key:
            node_type: setting
            type: string
            default: ''
            env_vars:
            - DD_SECURITY_AGENT_INTERNAL_PROFILING_API_KEY
            - DD_API_KEY
          block_profile_rate:
            node_type: setting
            type: integer
            default: 0
          cpu_duration:
            node_type: setting
            type: string
            default: 1m0s
            env_vars:
            - DD_SECURITY_AGENT_INTERNAL_PROFILING_CPU_DURATION
            format: duration
            tags:
            - golang_type:duration
          delta_profiles:
            node_type: setting
            type: boolean
            default: true
          enable_block_profiling:
            node_type: setting
            type: boolean
            default: false
          enable_goroutine_stacktraces:
            node_type: setting
            type: boolean
            default: false
          enable_mutex_profiling:
            node_type: setting
            type: boolean
            default: false
          enabled:
            node_type: setting
            type: boolean
            default: false
            env_vars:
            - DD_SECURITY_AGENT_INTERNAL_PROFILING_ENABLED
          env:
            node_type: setting
            type: string
            default: ''
            env_vars:
            - DD_SECURITY_AGENT_INTERNAL_PROFILING_ENV
            - DD_ENV
          extra_tags:
            node_type: setting
            type: array
            default: []
            items:
              type: string
          mutex_profile_fraction:
            node_type: setting
            type: integer
            default: 0
          period:
            node_type: setting
            type: string
            default: 5m0s
            env_vars:
            - DD_SECURITY_AGENT_INTERNAL_PROFILING_PERIOD
            format: duration
            tags:
            - golang_type:duration
          profile_dd_url:
            node_type: setting
            type: string
            default: ''
            env_vars:
            - DD_SECURITY_AGENT_INTERNAL_PROFILING_DD_URL
            - DD_APM_INTERNAL_PROFILING_DD_URL
          site:
            node_type: setting
            type: string
            default: datadoghq.com
            env_vars:
            - DD_SECURITY_AGENT_INTERNAL_PROFILING_SITE
            - DD_SITE
          unix_socket:
            node_type: setting
            type: string
            default: ''
      log_file:
        node_type: setting
        type: string
        default: ${log_path}/security-agent.log
    tags:
    - full-agent-only:true
  serializer_compressor_kind:
    node_type: setting
    type: string
    default: zstd
  serializer_experimental_use_v3_api:
    node_type: section
    type: object
    properties:
      compression_level:
        node_type: setting
        type: integer
        default: 0
      series:
        node_type: section
        type: object
        properties:
          beta_route:
            node_type: setting
            type: string
            default: /api/intake/metrics/v3beta/series
          endpoints:
            node_type: setting
            type: array
            default: []
            items:
              type: string
          shadow_sample_rate:
            node_type: setting
            type: number
            default: 0
            tags:
            - golang_type:float64
          shadow_sites:
            node_type: setting
            type: array
            default:
            - datadoghq.com
            items:
              type: string
          use_beta:
            node_type: setting
            type: boolean
            default: false
          validate:
            node_type: setting
            type: boolean
            default: false
      sketches:
        node_type: section
        type: object
        properties:
          endpoints:
            node_type: setting
            type: array
            default: []
            items:
              type: string
          validate:
            node_type: setting
            type: boolean
            default: false
  serializer_max_payload_size:
    node_type: setting
    type: integer
    default: 2621440
    comment: 'Warning: do not change the following values. Your payloads will get
      dropped by Datadog''s intake.'
  serializer_max_series_payload_size:
    node_type: setting
    type: integer
    default: 512000
  serializer_max_series_points_per_payload:
    node_type: setting
    type: integer
    default: 10000
  serializer_max_series_uncompressed_payload_size:
    node_type: setting
    type: integer
    default: 5242880
  serializer_max_uncompressed_payload_size:
    node_type: setting
    type: integer
    default: 4194304
  serializer_zstd_compressor_level:
    node_type: setting
    type: integer
    default: 1
  serverless:
    node_type: section
    type: object
    properties:
      enabled:
        node_type: setting
        type: boolean
        default: false
        tags:
        - no-env
      logs_enabled:
        node_type: setting
        type: boolean
        default: true
      service_mapping:
        node_type: setting
        type: string
        default: ''
        env_vars:
        - DD_SERVICE_MAPPING
      trace_enabled:
        node_type: setting
        type: boolean
        default: true
        env_vars:
        - DD_TRACE_ENABLED
      trace_managed_services:
        node_type: setting
        type: boolean
        default: true
        env_vars:
        - DD_TRACE_MANAGED_SERVICES
  service_discovery:
    node_type: section
    type: object
    properties:
      forwarder:
        node_type: section
        type: object
        properties:
          additional_endpoints:
            node_type: setting
            type: array
            default: []
            items:
              type: object
          batch_max_concurrent_send:
            node_type: setting
            type: integer
            default: 0
          batch_max_content_size:
            node_type: setting
            type: integer
            default: 5000000
          batch_max_size:
            node_type: setting
            type: integer
            default: 1000
          batch_wait:
            node_type: setting
            type: number
            default: 5
            tags:
            - golang_type:float64
          compression_kind:
            node_type: setting
            type: string
            default: zstd
          compression_level:
            node_type: setting
            type: integer
            default: 6
          connection_reset_interval:
            node_type: setting
            type: integer
            default: 0
          dd_url:
            node_type: setting
            type: string
            default: ''
          dev_mode_no_ssl:
            node_type: setting
            type: boolean
            default: false
            tags:
            - no-env
          input_chan_size:
            node_type: setting
            type: integer
            default: 100
          logs_dd_url:
            node_type: setting
            type: string
            default: ''
          logs_no_ssl:
            node_type: setting
            type: boolean
            default: false
          sender_backoff_base:
            node_type: setting
            type: number
            default: 1
            tags:
            - golang_type:float64
          sender_backoff_factor:
            node_type: setting
            type: number
            default: 2
            tags:
            - golang_type:float64
          sender_backoff_max:
            node_type: setting
            type: number
            default: 120
            tags:
            - golang_type:float64
          sender_recovery_interval:
            node_type: setting
            type: integer
            default: 2
          sender_recovery_reset:
            node_type: setting
            type: boolean
            default: false
          use_compression:
            node_type: setting
            type: boolean
            default: true
          use_v2_api:
            node_type: setting
            type: boolean
            default: true
          zstd_compression_level:
            node_type: setting
            type: integer
            default: 1
  shared_library_check:
    node_type: section
    type: object
    properties:
      enabled:
        node_type: setting
        type: boolean
        default: false
        comment: Shared library check
      library_folder_path:
        node_type: setting
        type: string
        default: ${conf_path}/checks.d
    tags:
    - full-agent-only:true
  snmp_listener:
    $ref: snmp_listener.yaml
  software_inventory:
    node_type: section
    type: object
    properties:
      enabled:
        node_type: setting
        type: boolean
        default: false
        comment: Software Inventory
      forwarder:
        node_type: section
        type: object
        properties:
          additional_endpoints:
            node_type: setting
            type: array
            default: []
            items:
              type: object
          batch_max_concurrent_send:
            node_type: setting
            type: integer
            default: 0
          batch_max_content_size:
            node_type: setting
            type: integer
            default: 5000000
          batch_max_size:
            node_type: setting
            type: integer
            default: 1000
          batch_wait:
            node_type: setting
            type: number
            default: 5
            tags:
            - golang_type:float64
          compression_kind:
            node_type: setting
            type: string
            default: zstd
          compression_level:
            node_type: setting
            type: integer
            default: 6
          connection_reset_interval:
            node_type: setting
            type: integer
            default: 0
          dd_url:
            node_type: setting
            type: string
            default: ''
          dev_mode_no_ssl:
            node_type: setting
            type: boolean
            default: false
            tags:
            - no-env
          input_chan_size:
            node_type: setting
            type: integer
            default: 100
          logs_dd_url:
            node_type: setting
            type: string
            default: ''
          logs_no_ssl:
            node_type: setting
            type: boolean
            default: false
          sender_backoff_base:
            node_type: setting
            type: number
            default: 1
            tags:
            - golang_type:float64
          sender_backoff_factor:
            node_type: setting
            type: number
            default: 2
            tags:
            - golang_type:float64
          sender_backoff_max:
            node_type: setting
            type: number
            default: 120
            tags:
            - golang_type:float64
          sender_recovery_interval:
            node_type: setting
            type: integer
            default: 2
          sender_recovery_reset:
            node_type: setting
            type: boolean
            default: false
          use_compression:
            node_type: setting
            type: boolean
            default: true
          use_v2_api:
            node_type: setting
            type: boolean
            default: true
          zstd_compression_level:
            node_type: setting
            type: integer
            default: 1
      interval:
        node_type: setting
        type: integer
        default: 10
      jitter:
        node_type: setting
        type: integer
        default: 60
  statsd_metric_blocklist:
    node_type: setting
    type: array
    default: []
    items:
      type: string
    tags:
    - full-agent-only:true
  statsd_metric_blocklist_match_prefix:
    node_type: setting
    type: boolean
    default: false
    tags:
    - full-agent-only:true
  statsd_metric_namespace_blacklist:
    node_type: setting
    type: array
    default:
    - datadog.agent
    - datadog.dogstatsd
    - datadog.process
    - datadog.trace_agent
    - datadog.tracer
    - activemq
    - activemq_58
    - airflow
    - cassandra
    - confluent
    - hazelcast
    - hive
    - ignite
    - jboss
    - jvm
    - kafka
    - presto
    - sidekiq
    - solr
    - tomcat
    - runtime
    items:
      type: string
  telemetry:
    node_type: section
    type: object
    properties:
      checks:
        node_type: setting
        type: array
        default: []
        items:
          type: string
      dogstatsd:
        node_type: section
        type: object
        properties:
          aggregator_channel_latency_buckets:
            node_type: setting
            type: array
            default: []
            items:
              type: string
            comment: The histogram buckets use to track the time in nanoseconds it
              takes for the DogStatsD server to push data to the aggregator
          listeners_channel_latency_buckets:
            node_type: setting
            type: array
            default: []
            items:
              type: string
            comment: The histogram buckets use to track the time in nanoseconds it
              takes for a DogStatsD listeners to push data to the server
          listeners_latency_buckets:
            node_type: setting
            type: array
            default: []
            items:
              type: string
            comment: |-
              We're using []string as a default instead of []float64 because viper can only parse list of string from the environment

              The histogram buckets use to track the time in nanoseconds DogStatsD listeners are not reading/waiting new data
      dogstatsd_origin:
        node_type: setting
        type: boolean
        default: false
      enabled:
        node_type: setting
        type: boolean
        default: false
        comment: |-
          Enable telemetry metrics on the internals of the Agent.
          This create a lot of billable custom metrics.
      offlinereporter:
        node_type: section
        type: object
        properties:
          enabled:
            node_type: setting
            type: boolean
            default: false
          heartbeat_interval:
            node_type: setting
            type: string
            default: 5s
      python_memory:
        node_type: setting
        type: boolean
        default: true
  tls_handshake_timeout:
    node_type: setting
    type: string
    default: 10s
    format: duration
    tags:
    - golang_type:duration
  trace_agent_host_socket_path:
    node_type: setting
    type: string
    default: /var/run/datadog
    tags:
    - full-agent-only:true
  tracemalloc_blacklist:
    node_type: setting
    type: string
    default: ''
    comment: deprecated
  tracemalloc_whitelist:
    node_type: setting
    type: string
    default: ''
    comment: deprecated
  use_diskv2_check:
    node_type: setting
    type: boolean
    default: true
    tags:
    - full-agent-only:true
    comment: |-
      If true, then new version of disk v2 check will be used.
      Otherwise, the python version of disk check will be used.
  use_improved_cgroup_parser:
    node_type: setting
    type: boolean
    default: false
  use_networkv2_check:
    node_type: setting
    type: boolean
    platform_default:
      linux: true
      windows: true
      other: false
    tags:
    - full-agent-only:true
    comment: |-
      the darwin and bsd network check has not been ported from python
      If true, then new version of network v2 check will be used.
      Otherwise, the python version of network check will be used.
  use_v2_api:
    node_type: section
    type: object
    properties:
      series:
        node_type: setting
        type: boolean
        default: true
  vector:
    node_type: section
    type: object
    properties:
      logs:
        node_type: section
        type: object
        properties:
          dual_ship:
            node_type: setting
            type: boolean
            default: false
            comment: "Legacy vector.* aliases for dual_ship keys \u2014 users still\
              \ on the legacy prefix must not have\ndual_ship=true silently dropped\
              \ when the fallback in obsPipelineWorkerDualShip reads these keys."
          dual_ship_reliable:
            node_type: setting
            type: boolean
            default: false
          enabled:
            node_type: setting
            type: boolean
            default: false
          url:
            node_type: setting
            type: string
            default: ''
      metrics:
        node_type: section
        type: object
        properties:
          enabled:
            node_type: setting
            type: boolean
            default: false
          url:
            node_type: setting
            type: string
            default: ''
          use_v3_api:
            node_type: section
            type: object
            properties:
              series:
                node_type: setting
                type: boolean
                default: false
      traces:
        node_type: section
        type: object
        properties:
          enabled:
            node_type: setting
            type: boolean
            default: false
          url:
            node_type: setting
            type: string
            default: ''
  vsock_addr:
    node_type: setting
    type: string
    default: ''
    tags:
    - full-agent-only:true
    comment: Vsock
  win_skip_com_init:
    node_type: setting
    type: boolean
    default: false
  windows_counter_init_failure_limit:
    node_type: setting
    type: integer
    default: 20
    tags:
    - full-agent-only:true
    comment: |-
      Added in Agent version 7.42
      Limits the number of times a check will attempt to initialize a performance counter before ceasing
      attempts to initialize the counter. This allows the Agent to stop incurring the overhead of trying
      to initialize a counter that will probably never succeed. For example, when the performance counter
      database needs to be rebuilt or the counter is disabled.
      https://learn.microsoft.com/en-us/troubleshoot/windows-server/performance/manually-rebuild-performance-counters

      The value of this option should be chosen in consideration with the windows_counter_refresh_interval option.
      The performance counter cache is refreshed during subsequent attempts to intiialize a counter that failed
      the first time (with consideration of the windows_counter_refresh_interval value).
      It is unknown if it is possible for a counter that failed to initialize to later succeed without a refresh
      in between the attempts. Consequently, if windows_counter_refresh_interval is 0 (disabled), then this option should
      be 1. If this option is too small compared to the windows_counter_refresh_interval, it is possible to reach the limit
      before a refresh occurs. Typically there is one attempt per check run, and check runs are 15 seconds apart by default.

      Increasing this value may help in the rare instance where counters are not available for some time after host boot.

      Setting this option to 0 disables the limit and the Agent will attempt to initialize the counter forever.
      The default value of 20 means the Agent will retry counter intialization for roughly 5 minutes.
  windows_counter_refresh_interval:
    node_type: setting
    type: integer
    default: 60
    tags:
    - full-agent-only:true
    comment: |-
      Windows Performance Counter refresh interval in seconds (introduced in 7.40, narrowed down
      in 7.42). Additional information can be found where it is used (refreshPdhObjectCache())
      The refresh can be disabled by setting the interval to 0.
  workloadmeta:
    node_type: section
    type: object
    properties:
      local_process_collector:
        node_type: section
        type: object
        properties:
          collection_interval:
            node_type: setting
            type: string
            default: 1m0s
            format: duration
            tags:
            - golang_type:duration
            comment: |-
              The interval at which processes are collected and sent to the workloadmeta in the core agent if the process
              check is disabled.
      remote:
        node_type: section
        type: object
        properties:
          recv_without_timeout:
            node_type: setting
            type: boolean
            default: true
            comment: debug config to enable a remote client to receive data from the
              workloadmeta agent without a timeout
    tags:
    - full-agent-only:true