Skip to content

DataDog/azure-log-forwarding-orchestration

Repository files navigation

Automated Log Forwarding for Azure

Zero-maintenance log forwarding from Azure to Datadog with intelligent scaling

Deploy to Azure

Why Automated Log Forwarding for Azure?

Stop wrestling with Azure log complexity. Automated Log Forwarding for Azure is the industry's first fully automated, enterprise-scale log forwarding orchestration system that discovers, configures, and forwards all your Azure logs without manual intervention.

🎯 Built for Enterprise Scale

  • Automatic Resource Discovery: Finds and configures log forwarding for your Azure resources
  • Intelligent Auto-Scaling: Dynamically provisions forwarders based on actual log volume - scale from zero to millions of logs/second
  • Zero Configuration: Deploy once, forward forever - no per-resource setup required
  • Enterprise Reliability: Built-in dead letter queues, cursor-based state management, and automatic retry logic

πŸ›‘οΈ Security & Compliance First

  • PII Scrubbing: Configurable data privacy protection removes sensitive information before forwarding
  • Azure-Native Security: Leverages Azure RBAC, Managed Identity, and encryption at rest

⚑ Performance at Scale

  • Multi-Region: Deploys forwarders close to data sources for minimal latency
  • Efficient Batching: Optimized for Datadog API limits with intelligent compression
  • Resource Optimization: Pay only for what you use with serverless Container Apps

Architecture

Automated Log Forwarding for Azure uses a sophisticated three-tier architecture designed for enterprise reliability and performance:

β”Œβ”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”    β”Œβ”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”    β”Œβ”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”
β”‚  Control Plane  │────│    Forwarders    │────│     Datadog     β”‚
β”‚  (Orchestrator) β”‚    β”‚ (Log Processors) β”‚    β”‚   (Destination) β”‚
β””β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”˜    β””β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”˜    β””β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”˜
         β”‚                       β”‚                       β”‚
         β”‚                       β”‚                       β”‚
   β”Œβ”€β”€β”€β”€β”€β–Όβ”€β”€β”€β”€β”€β”            β”Œβ”€β”€β”€β”€β–Όβ”€β”€β”€β”€β”€β”€β”€β”          β”Œβ”€β”€β”€β”€β–Όβ”€β”€β”€β”€β”
   β”‚ Resource  β”‚            β”‚ Azure      β”‚          β”‚ Datadog β”‚
   β”‚ Discovery β”‚            β”‚ Blob       β”‚          β”‚ Logs    β”‚
   β”‚           β”‚            β”‚ Storage    β”‚          β”‚ API     β”‚
   β”‚ Scaling   β”‚            β”‚ Processing β”‚          β””β”€β”€β”€β”€β”€β”€β”€β”€β”€β”˜
   β”‚           β”‚            β””β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”˜
   β”‚ Diagnosticβ”‚
   β”‚ Settings  β”‚
   β””β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”˜

Control Plane (Python)

Intelligent orchestration engine that manages the entire system lifecycle:

  • Resource Discovery: Continuously scans Azure subscriptions for log-generating resources
  • Smart Scaling: Provisions/deprovisions forwarders based on real-time log volume metrics
  • Configuration Management: Automatically configures Azure diagnostic settings
  • Health Monitoring: Monitors system health and triggers automatic remediation
  • Selective Targeting: Configurable filters for specific resource types or tags

Forwarders (Go)

High-performance log processing engines optimized for throughput:

  • Stream Processing: Real-time processing of Azure blob storage streams
  • Multi-Format Parsing: Native support for all Azure log formats (Function Apps, NSG Flow Logs, Active Directory, etc.)
  • State Management: Cursor-based tracking ensures zero data loss
  • Error Handling: Sophisticated retry logic with dead letter queues

Integration Layer

  • Azure-Native: Uses Azure Container Apps, Storage Accounts, and Managed Identity
  • Datadog Integration: Optimized for Datadog's ingestion APIs with proper batching and compression

Quick Start

One-Click Deployment

Deploy the complete system to your Azure subscription in under 5 minutes:

Deploy to Azure

Standalone Forwarder

Deploy just the forwarder component for specific use cases:

Deploy to Azure

That's it. Automated Log Forwarding for Azure will automatically:

  1. Discover all log-generating resources in your subscription(s)
  2. Configure diagnostic settings to route logs to storage
  3. Deploy and scale forwarders based on log volume
  4. Begin forwarding logs to Datadog

Please see our official documentation for a more detailed getting started guide.

Technical Specifications

Supported Log Types

  • Function App Logs
  • Network Security Group Flow Logs
  • Azure Active Directory Logs
  • Application Insights Logs
  • Resource Manager Activity Logs
  • Custom Application Logs
  • And ANY other Azure log types available via Diagnostic Settings

Deployment Options

  • Full System: Complete orchestration with auto-discovery
  • Standalone Forwarder: Individual forwarder instances

Development & Customization

Automated Log Forwarding for Azure is built with extensibility in mind:

  • 🐍 Python Control Plane: Extensible orchestration logic with comprehensive APIs
  • ⚑ Go Forwarders: High-performance processing with plugin architecture
  • πŸ—οΈ Infrastructure as Code: Complete ARM/Bicep templates for customization
  • πŸ”§ Configuration Management: YAML-based configuration for all components

Development Resources:

Why Choose Automated Log Forwarding for Azure?

Traditional Approach Automated Log Forwarding for Azure
❌ Manual configuration per resource βœ… Automatic discovery and configuration
❌ Fixed scaling, over-provisioning βœ… Dynamic scaling based on actual usage
❌ Complex maintenance and updates βœ… Self-managing with automatic updates

Ready to transform your Azure logging strategy? Deploy to Azure

Built with ❀️ by the Azure Integrations team at Datadog

About

Azure LFO

Resources

License

Security policy

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Contributors 11