Skip to main content
Version: Next

Deployment & Configuration

To integrate NFO with Datadog, you will configure the Datadog Agent to listen for network telemetry and set NFO to deliver its enriched output to that Agent.

1. Prepare the Datadog Agent​

The Datadog Agent acts as a local collector for NFO data. It can be installed on the same machine as NFO or a dedicated log-collection host.

Enable Log Collection​

In your Agent's main configuration file (datadog.yaml), ensure that log collection is enabled:

logs_enabled: true

Configure the NFO Log Source​

Create a new configuration folder and file to define the NFO data stream:

  1. Navigate to the conf.d/ directory in your Agent's root folder.
  2. Create a folder named nfo.d/.
  3. Inside nfo.d/, create a file named conf.yaml and add the following:
logs:
  - type: udp
    port: 5514
    service: NFO
    source: network-telemetry

  1. Restart the Datadog Agent to apply the changes.

2. Configure NFO Output​

Set NFO to push the reduced and enriched logs to the Agent you just configured.

  1. In the NFO GUI, go to Data Outputs and click the plus sign (+).
  2. Type: Select JSON (UDP).
  3. Address: Enter the IP address of the Datadog Agent (use localhost if the Agent is on the same machine as NFO).
  4. Port: Enter 5514 (matching the port configured in the Agent's conf.yaml).

3. Verify in Datadog​

Open the Datadog Log Explorer and filter by service:NFO. You should see JSON logs arriving with enriched fields such as src_ip and src_host.