init_config: | |
instances: | |
- type: | |
- Information | |
- Critical | |
- Error | |
- Warning | |
- Information | |
- Audit Failure | |
- Audit Success | |
log_file: | |
- Application | |
- System | |
- Security | |
- Application | |
- Setup | |
- Symantec Endpoint Protection Client | |
logs: | |
- type: windows_event | |
channel_path: Application | |
source: Application | |
service: Application | |
sourcecategory: windowsevent | |
- type: windows_event | |
channel_path: Security | |
source: Security | |
service: Security | |
sourcecategory: windowsevent | |
- type: windows_event | |
channel_path: System | |
source: System | |
service: System | |
sourcecategory: windowsevent | |
- type: windows_event | |
channel_path: Setup | |
source: Setup | |
service: Setup | |
sourcecategory: windowsevent |
# Download agent | |
(Invoke-WebRequest https://s3.amazonaws.com/ddagent-windows-stable/datadog-agent-7-latest.amd64.msi -OutFile c:\datadog-agent-7-latest.amd64.msi) | |
# Download .NET Tracer v1.13x64 .msi | |
[Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12 | |
(Invoke-WebRequest https://github.com/DataDog/dd-trace-dotnet/releases/download/v1.13.0/datadog-dotnet-apm-1.13.0-x64.msi -OutFile c:\datadog-dotnet-apm-1.13.0-x64.msi) | |
# Start the Datadog agent | |
(Start-Process -Wait msiexec -ArgumentList '/qn /i c:\datadog-agent-7-latest.amd64.msi APIKEY=xxx HOSTNAME="my_hostname" TAGS="mytag1,mytag2"') | |
# Start .NET Tracer v1.13x64 | |
(Start-Process -Wait msiexec -ArgumentList '/qn /i c:\datadog-dotnet-apm-1.13.0-x64.msi') | |
# Enable logs and live process | |
((Get-Content -path C:\ProgramData\Datadog\datadog.yaml -Raw) -replace '# logs_enabled: false','logs_enabled: true') | Set-Content -Path C:\ProgramData\Datadog\datadog.yaml | |
(Add-Content C:\ProgramData\Datadog\datadog.yaml "`nprocess_config:`n enabled: true" ) | |
# Delete Datadog agent .msi & .NET tracer agent v1.13x64 | |
(Remove-Item -Path c:\datadog-agent-7-latest.amd64.msi) | |
(Remove-Item -Path c:\datadog-dotnet-apm-1.13.0-x64.msi) | |
# Configure win32_event_log | |
echo "init_config: | |
instances: | |
- type: | |
- Information | |
- Critical | |
- Error | |
- Warning | |
- Information | |
- Audit Failure | |
- Audit Success | |
log_file: | |
- Application | |
- System | |
- Security | |
- Application | |
- Setup | |
- Symantec Endpoint Protection Client | |
logs: | |
- type: windows_event | |
channel_path: Application | |
source: Application | |
service: Application | |
sourcecategory: windowsevent | |
- type: windows_event | |
channel_path: Security | |
source: Security | |
service: Security | |
sourcecategory: windowsevent | |
- type: windows_event | |
channel_path: System | |
source: System | |
service: System | |
sourcecategory: windowsevent | |
- type: windows_event | |
channel_path: Setup | |
source: Setup | |
service: Setup | |
sourcecategory: windowsevent" > C:\ProgramData\Datadog\conf.d\win32_event_log.d\conf.yaml |
I’m a DevOps/SRE/DevSecOps/Cloud Expert passionate about sharing knowledge and experiences. I am working at Cotocus. I blog tech insights at DevOps School, travel stories at Holiday Landmark, stock market tips at Stocks Mantra, health and fitness guidance at My Medic Plus, product reviews at I reviewed , and SEO strategies at Wizbrand.
Please find my social handles as below;
Rajesh Kumar Personal Website
Rajesh Kumar at YOUTUBE
Rajesh Kumar at INSTAGRAM
Rajesh Kumar at X
Rajesh Kumar at FACEBOOK
Rajesh Kumar at LINKEDIN
Rajesh Kumar at PINTEREST
Rajesh Kumar at QUORA
Rajesh Kumar at WIZBRAND