7.75.0

Agent

Prelude

Release on: 2026-01-21

• Please refer to the 7.75.0 tag on integrations-core for the list of changes on the Core Checks

Upgrade Notes

• system-probe will now attempt to read datadog.yaml from the same directory as system-probe.yaml. Previously, system-probe would always use the default configuration directory to read datadog.yaml. If you need to specify a different directory for datadog.yaml, you may use the --datadogcfgpath CLI argument to system-probe.

New Features

• Added support for infrastructure_mode: end_user_device configuration option. When enabled, this mode automatically activates key monitoring features tailored for end-user devices including process collection, software inventory tracking, and notable events monitoring. These settings can still be individually overridden in the configuration file if needed.
• Make MSI install the DDOT OCI package via command line option.
• Add a new collector that will collect all CustomResourceDefinitions on the cluster.
• Add new Data Streams intake for Kafka messages
• [APM] Add support for DD_APM_MODE=edge. This mode configures the Agent to receive traces from edge devices.
• The datadog-agent now uses datadog-secret-backend v1.5.0 which added support for Kubernetes secrets via the Secrets API, Kubernetes file-based secrets, support for Docker secrets, and support for plaintext file secrets.
• Collect feature gate and version data as part of kubernetes api server workloadmeta collector.
• Added a system battery check for macOS hosts to monitor battery health.
• Added a system battery check for Windows hosts to monitor battery health.

Enhancement Notes

• Add a new azure_metadata_api_version configuration option to allow customers to specify the Azure Instance Metadata Service (IMDS) API version used by the Agent. The default value is now 2021-02-01. This setting can be configured via azure_metadata_api_version in datadog.yaml or the DD_AZURE_METADATA_API_VERSION environment variable.

• The Agent's embedded Python has been upgraded from 3.13.10 to 3.13.11

• Fixed a potential race condition in the Cloud Foundry CCCache locking mechanism by replacing custom lock management with singleflight. This change improves handling of concurrent cache misses.

• Add the canonical version annotation to the image named internal.apm.datadoghq.com/[lang/injector]-canonical-version. This makes it easier to track the actual version of the image used in the cluster, instead of just a digest or mutable tag.

• Dogstatsd named pipe on Windows is now read/writeable for everyone by default. This prevents an Access is denied error when opening a named pipe for dogstatsd server on a Windows Azure App Service Web app. Security descriptor for the named pipe can be customized via dogstatsd_windows_pipe_security_descriptor.

• Detect connection issue when using FQDN in agent diagnose

• Agents are now built with Go 1.25.5.

• The datadog-secret-backend now allows implicit Vault authentication to be set as a config option or an env var Added a configurable max_file_read_size config option to file.yaml, file.json, & file.text to prevent OOM reads

• Added Microsoft Store apps to Windows Software Inventory integration.

• Added a new boolean environment variable DD_OTELCOLLECTOR_GATEWAY_MODE for precise identification of the DDOT operating mode. The variable automatically configured via the Helm chart, the Operator, or set manually. Acceptable string values are (case insensitive): "true", "false", "1", "0"

• The Discovery module is now enabled by default if system-probe is enabled. It can be disabled by setting discovery.enabled: false in system-probe.yaml, or by setting the DD_DISCOVERY_ENABLED environment variable to false.

• The Agent's logger has been rewritten with a more modern library to improve security and performance. No visible change is expected for users. In case of issues, the previous logger can still be used by setting log_use_slog to false in the Agent configuration. This configuration will be removed in a future release.

• Enable the orchestrator_explorer.kubelet_config_check.enabled by default.

• Bump OpenTelemetry Collector dependencies to v0.141.0/v1.47.0

• OTLP spans describing an HTTP error without an explicit error message will now fallback to one with a description, eg. "500 Internal Server Error" instead of just "500". Users who relied on the error message to extract the status code should use http.response.status_code instead.

  Additionally, the error message is no longer sourced from the deprecated http.status_text attribute. This behavior can be overridden by explicitly setting the span's status message.

• On Windows, adds process name to live processes via file properties.

• Single Step Instrumentation now uses the Python tracer major version 4 by default. Customers instrumenting Python applications through SSI should review the [4.0.0](https://github.com/DataDog/dd-trace-py/releases/tag/v4.0.0) release notes and the [compatibility guide](https://docs.datadoghq.com/tracing/trace_collection/compatibility/python/) to ensure their Python applications are compatible.

• Add flare support for workloadfilter component.

Deprecation Notes

• APM: Removed unused configuration options apm_config.service_writer.queue_size, and apm_config.service_writer.connection_limit. These options were already ignored.

Bug Fixes

• Reduced log verbosity in the aggregator by changing the log level from Info to Debug for the message logged when no value is returned for a check metric.
• Add missing files (runtime config dump, go routines) in cluster-agent flare.
• Fix small bug in Cluster Autoscaling when checking Target Hash value.
• Fixed ddnpm to report TLS cipher suite and chosen TLS version.
• Fixes a bug on ecs fargate where the container check on the core agent was not reporting the status of the container
• Fixed incorrect docker.cpu.shares metric values on cgroups v2 systems running runc >= 1.3.2 or crun >= 1.23. The new container runtimes use a different formula to convert CPU shares to cgroup v2 weight, which caused the Agent to report wrong values (e.g., 2597 instead of 1024 for default shares). The Agent now auto-detects which conversion formula the runtime uses and applies the correct inverse transformation.
• Fixed ECS ARN parsing to support AWS GovCloud (aws-us-gov) and China (aws-cn) regions. Previously, only the standard aws partition was accepted, causing ECS metadata extraction to fail for customers running the Datadog Agent in GovCloud or China regions. This resulted in empty region and account ID values, breaking ECS monitoring for these customers.
• Fixed live process file descriptor resolution on Windows to use the full executable path.
• Fixes a bug in the SNMP integration, where some metrics defined in an instance config were not reported.
• Fixed a bug in the SNMP integration, where a custom profile's sysObjectIDs could conflict with default profiles' when defining the name field in the custom profile.
• Fixes remote tagger implementation to backoff when the stream is initialized but receiving events through the stream fails.
• Fix SNMP Autodiscovery bug where the Agent had to be restarted to take into account new devices discovered in a subnet.
• Fixes a rare crash on Windows during the Wi-Fi check when the Agent cannot find a matching Wi-Fi adapter on some computers.
• Fixed ownership and permissions for the /opt/datadog-agent/run directory in Agent and Cluster Agent Docker images. This resolves permission errors encountered by Remote Configuration when running as a non-root user (UID 100), such as in AWS ECS Fargate environments.
• The NTP check now submits the ntp.offset metric using the timestamp returned by the NTP server rather than the local system clock. This restores the behavior present in Agent v5 and prevents incorrect metric alignment when host clocks are skewed.
• OTLP span events recording exceptions no longer have their stack trace duplicated on the parent span. This previously led to duplicate errors on the Error Tracking page.
• Fixed SNMP network topology metadata where LLDP remote device IP addresses could be incorrectly mapped when multiple devices shared the same remote index on different ports.

Other Notes

• This feature is currently in development and is protected under the feature flag:
  cluster_checks.crd_collection

• For up-to-date docs, check out the secret-backend changelog, and the Datadog Secrets Management documentation

• Refactored Cloud Foundry CCCache and BBSCache to use dependency injection to improve tests reliability and maintainability.

Datadog Cluster Agent

Prelude

Released on: 2026-01-21 Pinned to datadog-agent v7.75.0: CHANGELOG.

Upgrade Notes

• The Datadog Cluster Agent's mutating webhooks (part of the [Admission C...

7.74.1

Agent

Prelude

Release on: 2026-01-12

• Please refer to the 7.74.1 tag on integrations-core for the list of changes on the Core Checks

Bug Fixes

• Fix fatal concurrent map access errors that might occur when system-probe evaluates SSH monitoring security rules.
• Fix a bug that crashes the Agent when remotely changing the system-probe configuration from Fleet Automation.

Datadog Cluster Agent

Prelude

Released on: 2026-01-12 Pinned to datadog-agent v7.74.1: CHANGELOG.

7.74.0

Agent

Prelude

Release on: 2026-01-07

• Please refer to the 7.74.0 tag on integrations-core for the list of changes on the Core Checks

Upgrade Notes

• Added the agent workloadfilter verify-cel subcommand, which validates CEL rules from a YAML file.
• Migrate from batch processor to exporter helper batch configs in DDOT. The batch processor is deprecated upstream and is now removed from the default DDOT config.

New Features

• Added the agent workloadfilter CLI command, which shows the active workload filter bundles,
  their load status, and the effective filter configuration.

• Adds new Cluster Autoscaling controller in Cluster Agent.

• Adds the hpflare extension, which provides flare information for the host-profiler.

• Introduce a new Health Platform component that provides a unified way to detect, collect, and report host system health issues. The component runs health checks periodically and exposes telemetry for monitoring detected problems.

• The datadog-agent now uses datadog-secret-backend v1.4.0 which supports GCP secrets via Google Secret Manager.

• Create an inferred span to represent the entire duration of a Cloud Run Job task.

• Checks can be scheduled only once with run_once configuration

• Data Streams Kafka actions perform actions on Kafka clusters

• gpu: add count metrics for NVIDIA ECC errors

• Logs Agent is able to restart its pipeline in place to enable switching between endpoint types (HTTP/TCP) without full Agent restart.

• The OTEL logs agent exporter now supports exporting Kubernetes orchestrator data. The exporter consumes Kubernetes resource manifests from the k8sobjectsreceiver and forwards them to Datadog's orchestrator endpoint. This enables Kubernetes cluster visibility through the OTEL agent pipeline.

  Use the OrchestratorConfig section to configure cluster name, API key, site, endpoint, and enablement toggle.

• The SNMP integration now automatically performs a default device scan for each configured and auto-discovered device.

• Adds a new argument, DD_INSTALL_ONLY, to the Windows MSI. Set DD_INSTALL_ONLY=true to install the Agent without starting the services.

Enhancement Notes

• The Agent's embedded Python has been upgraded from 3.13.7 to 3.13.10

• Provide FIPS-compliant builds for the Datadog distribution of OpenTelemetry (DDOT).

• Expose new OTLP -> DD semantic transformation methods in the opentelemetry-mapping-go package.

• Adding an 'instance-type' field to the inventoryhost payload.

• Add Docker log permissions health check that detects when the Agent cannot access container log files due to restrictive filesystem permissions. The check provides remediation guidance and an optional script to fix permission issues.

• Agents are now built with Go 1.24.10.

• Agents are now built with Go 1.24.11.

• Add host tag to associate host to a NodePool

• Add annotation to associate a replica NodePool to its target

• Move the chmod operation for the dogstatsd binary from runtime (entrypoint.sh) to build time (Dockerfile).

• Expand logs file rotation analytics to include more detailed information using telemetry metrics.

• Add fingerprint configuration information to the Logs Agent status page.

• Add remote config ID tagging to events generated by kafka_action integration for easy UI filtering

• Optimized the Kubernetes State Metrics (KSM) check by replacing fmt.Sprintf() calls with direct string concatenation in the ownerTags() function. This reduces memory allocation churn and saves approximately 20% CPU usage for the KSM check.

• The kubelet pod list cache is now disabled by default to reduce staleness. The Agent lists pods from the kubelet every 5s. Users who explicitly set kubelet_cache_pods_duration retain their existing behavior (the Agent lists pods approximately every 5 + cache duration seconds).

• [pkg/netflow] Add a new config option network.netflow.aggregator_max_flows_per_flush_interval that controls the maximum number of flows to be sent in a flush interval. Only sends the top flows, by # of bytes in the period up to the value in the config.

• Add container metric support for any CRI compliant runtime specified in the cri_socket_path configuration.

• Openmetrics-based checks using send_histograms_buckets now handle histogram resets without emitting a warning.

• Optimize auto multiline detection JSON aggregator to improve performance and reduce memory usage for single line JSON messages

• Optimize memory allocation in the KSM Core check by preallocating metric slices and skipping empty metrics in the store's Push() method. This should reduce 15% - 20% memory usage by ksm check, improving performance in clusters with large numbers of pods.

• The otel-agent can now be told not to contact the core-agent by setting DD_CMD_PORT to 0

• Add support for batch settings in the OTLP ingest endpoint (logs & metrics).

  • batch.min_size
  • batch.max_size
  • batch.flush_timeout

  These settings can be configured in the Agent config file or by using the environment variables.

• Change serverless-init default log level to error.

• Skip noisy Kubernetes metadata error logs in serverless-init.

• Change startup failure log level from debug to error.

• Increase the default EVP proxy maximum payload size from 5 MB to 10 MB in the Trace Agent.

• Fixes missing tags at container startup by buffering spans and APM stats until Kubernetes metadata is resolved.

• The agent now can automatically triggers a secret refresh when an API key expires or becomes invalid, either through 403 responses or periodic API key validation. The refresh rate is throttled by secret_refresh_on_api_key_failure_interval configuration option (in minutes).

• Enforces that the DDOT service is stopped by the core Agent service.

• Included tags for TLS offered versions and TLS chosen version as part of TCP connections stats on Windows.

Deprecation Notes

• Remove the OpenTelemetry Collector ecstaskobserver extension from DDOT. This extension has been removed from upstream OpenTelemetry Collector Contrib repo.

Bug Fixes

• [DBM] Bump go-sqllexer to v0.1.10 to fix the following bugs:
  • Fixes a normalization bug in SqlServer parameterized queries containing multiple depths of parentheses.
  • Fixes identifier quote removal to preserve quotes for aliases that aren't strictly alphanumeric.
• For ECS Managed Instances, the Agent no longer overrides the runtime to ECS. The runtime is now left for Docker to determine, ensuring correct backend configuration.
• Fixed a bug which caused events from pause containers to not be filtered out when using the containerd collector
• Refactored the KSM custom resource handling to support wildcard matching of version/kind and CRD discovery.
• Exclude the 'aws-fargate-pause' container from the default pause container exclusion list.
• Ensure NodePool spec hash has not changed before updating
• Creates replica NodePool by copying the target NodePool Spec, rather than creating from scratch
• Update reconcile to requeue when delays in LeaderElection may occur
• Fixed a file descriptor leak in the log file tailer where rotated tailers were not being properly removed from the active tailer container, causing them to remain active indefinitely. Rotated tailers now drain their remaining content while allowing new tailers to be created for the rotated file.
• Fixes ReplaceBindParameter obfuscation config handling in Python DBMS checks.
• Fix a bug preventing Fleet Automation from updating configurations files with the same YAML key set multiple times.
• GPU: Fixed some bugs that could cause incorrect container/process tags for Docker workloads.
• APM: Limit the size of the buffers used to decode the request body in the Trace Agent. This prevents the Agent from allocating memory for requests that are too large.
• Send ECS task lifecycle event for ECS Managed Instances when agent is deployed as a sidecar.
• When OTel db spans contain a db.statement or db.query.text that differ from the resource name, perform a separate obfuscation to avoid overriding their contents.
• CPU and wall clock time collection in Python profiling is re-enabled.
• Fixes a panic that occurs when running a manual cli rtprocess check via datadog-agent processchecks rtprocess
• Fixed a deadlock in the workloadmeta event pipeline where goroutines could block indefinitely when sending events to subscribers. Added a timeout to channel send operations to prevent blocking when a subscriber's channel buffer is full.

Other Notes

• Add metrics origins for 2025 Q4 Agent integrations.
  • ControlM
  • N8N
  • Nutanix
  • Palo Alto Panorama
  • Perfect
• Add new telemetry metric health_platform.issues_detected tagged by health_check_id to track the number of detected health issues over time.
• Reverts RunOnce added in #43325 (not released)

Datadog Cluster Agent

Prelude

Released on: 2026-01-07 Pinned ...

7.73.3

Agent

Prelude

Release on: 2025-12-31

• Please refer to the 7.73.3 tag on integrations-core for the list of changes on the Core Checks

Bug Fixes

• Fixed device-mapper (LVM) device tagging in the diskv2 check to match Python psutil behavior. Previously, devices were reported as dm-X (e.g., device:dm-0) instead of their friendly /dev/mapper/* names (e.g., device:ocivolume-root). This ensures backward compatibility with the Python disk check and preserves existing dashboards and monitors.

• Fix an issue introduced in 7.73.0 that can cause the MSI to overwrite the site option in datadog.yaml with the default value of datadoghq.com.

  This issue impacts users who do not provide the SITE option to the MSI when upgrading AND who have an error in their datadog.yaml file that prevents the MSI from reading the existing site option (MSI log contains ReadConfig. User config could not be read).

  This issue also impacts users of datadog-installer.exe and Install-Datadog.ps1, introduced in 7.72.0, who do not provide the DD_SITE environment variable when upgrading.

Datadog Cluster Agent

Prelude

Released on: 2025-12-31 Pinned to datadog-agent v7.73.3: CHANGELOG.

7.73.2

Agent

Prelude

Release on: 2025-12-23

• Please refer to the 7.73.2 tag on integrations-core for the list of changes on the Core Checks

Bug Fixes

• The disk check now handles PartitionsWithContext errors gracefully instead of failing entirely. When some partitions fail to load, the check continues collecting metrics for the partitions that succeeded. This aligns the Go implementation with the Python check behavior.
• The new version of the disk check on Windows now normalizes the device: tag by stripping backslashes and lowercasing, matching the Python disk check behavior. This ensures customers that migrated from Python to Go disk check see consistent device: tag values (e.g., C:\ becomes c:).
• Implemented a fix so that the Agent does not try to schedule the orchestrator_kubelet_config check when the orchestrator_explorer.kubelet_config_check.enabled config is set to false.

Datadog Cluster Agent

Prelude

Released on: 2025-12-23 Pinned to datadog-agent v7.73.2: CHANGELOG.

7.73.1

Agent

Prelude

Release on: 2025-12-17

• Please refer to the 7.73.1 tag on integrations-core for the list of changes on the Core Checks

Enhancement Notes

• Agents are now built with Go 1.24.11.

Datadog Cluster Agent

Prelude

Released on: 2025-12-17 Pinned to datadog-agent v7.73.1: CHANGELOG.

7.73.0

Agent

Prelude

Release on: 2025-12-10

• Please refer to the 7.73.0 tag on integrations-core for the list of changes on the Core Checks

Upgrade Notes

• Replace batch processor with exporter helper for OTLP ingest due to the upcoming end-of-life for batch processor. More details: open-telemetry/opentelemetry-collector#8122

• Remote Agent Management now creates a new directory that is at the same level as the current Agent configuration directory.

  • Linux: /etc/datadog-agent-exp
  • Windows: C:\ProgramData\Datadog-exp

  This directory is used during remote configuration updates and is deleted after the update is complete.

New Features

• Added a new core check to send raw Kubelet configuration manifests to the Kubernetes Orchestrator.

• Added comprehensive support for AWS ECS Managed Instances, including automatic deployment mode detection, hostname resolution for sidecar deployments, and validation logic to prevent misconfigured deployments.

• Configure filtering for collection of autodiscovered metrics and logs through CEL-based rules using cel_workload_exclude.

• Collect container metrics for ECS Managed Instances when running in sidecar mode.

• APM: A more efficient trace payload encoding through the /v1.0/traces endpoint has been added.

• Update JMXFetch to 0.51.0 to add configuration-level dynamic tags for JMX attribute values via dynamic_tags

• Remote Agent Management is now enabled by default for Agents running on Linux and Windows hosts. This feature allows you to remotely upgrade and configure the Agent from the Datadog UI in Fleet Automation.

  To disable, set remote_updates to false in the Agent configuration file.

• The Datadog Installer now supports installing the datadog-apm-inject package on Windows systems.

Enhancement Notes

• Adds kubernetes_state.daemonset.rollout_duration metric to the KSM check.

• Implement check filtering in the scheduler and CLI to enforce infrastructure basic mode restrictions. When running in basic mode (infrastructure_mode: "basic"), only core system checks (cpu, disk, memory, network, uptime, load, io, file_handle, ntp, system_core, telemetry) are allowed to execute. Additional checks can be allowlisted via the allowed_additional_integrations configuration option.

• The Agent's embedded Python has been upgraded from 3.13.7 to 3.13.10

• Network Path Collector (network traffic paths) now performs traceroutes using domain names instead of IP addresses.

• This release refactors the ECS workloadmeta collector architecture to clearly separate ECS launch type (EC2 vs Fargate) from agent deployment mode (daemon vs sidecar). This improves code organization, reduces duplication, and helps future Managed Instances support.

• KSM now supports using a wildcard to collect all resource labels/annotations as tags on metrics.

• Added CCRID (Canonical Cloud Resource ID) support for Oracle Cloud Infrastructure hosts.

• Add helpers for translating OTLP duration histograms to DDSketch in the pkg/opentelemetry-mapping-go/otlp/metrics package.

• APM: The Trace Agent now omits infrequently used statistics when their values are zero, reducing overhead.
  This can be overridden by setting the new configuration option apm_config.send_all_internal_stats to true.

• Agents are now built with Go 1.24.9.

• The Cluster Agent now enables both DD_CLUSTER_CHECKS_ADVANCED_DISPATCHING_ENABLED and DD_CLUSTER_CHECKS_REBALANCE_WITH_UTILIZATION by default. These options are now set to true in both the configuration template and the code, improving cluster check dispatching and balancing based on node utilization out-of-the-box. To disable these features, a user must now explicitly set them to false with the following config options: - name: DD_CLUSTER_CHECKS_ADVANCED_DISPATCHING_ENABLED value: "false" - name: DD_CLUSTER_CHECKS_REBALANCE_WITH_UTILIZATION value: "false"

• Enable the Go disk and network core checks by default for Windows and Linux. These are direct ports of the existing Python disk and network checks and allow the Python runtime to be lazy loaded when other integrations are enabled. It can be disabled with setting use_diskv2_check and use_networkv2_check respectively along with the loader in your configuration to use the Python version.

• Python runtime will now be lazy loaded when there are no Python integrations configured. This can be disabled by setting python_lazy_loading: false in your configuration.

• Allow check configurations to be matched to services using CEL selectors in Autodiscovery. This allows for more granular targeting of configurations to services based on their metadata.

• Adds the count of total GPU devices to the telemetry metrics emitted to Datadog.

• GPU: emit count metrics for NVIDIA Xid errors

• Adds DD_INFRASTRUCTURE_MODE install option to the datadog-installer-x86_64.exe installer and the Windows MSI installer. Set DD_INFRASTRUCTURE_MODE to configure the infrastructure_mode configuration option at installation.

• The infraattributes processor can now be run when the Datadog Exporter is not configured.

• Add --enable and --disable commands to the IIS .NET APM instrumentation management script on Windows

• Windows: Adds a PURGE argument to the MSI to remove all OCI packages during uninstallation.

• The Workload Protection's activity dump functionality on Linux has been improved to reduce its impact on processes that use very large amounts of memory.

• Cache result of TagsToString() in serverless-init to improve CPU performance.

• The DDOT service runs as ddagentuser.

Bug Fixes

• Applies a fix to the hacky_dev_image_build script to copy new check configurations.
• [DBM] Bump go-sqllexer to v0.1.9 to fix the following bugs:
  • Fixes a nil pointer when normalizing CTE queries with collectTables=false.
  • Fixes normalizing MySQL UNION ALL statements.
  • Fixes obfuscating MySQL double quoted string literals.
• Lock down dynamic symbol exports in the Linux Agent binary to prevent unexpected symbol conflicts.
• Changed the log level of the "Too many errors for endpoint '*': retrying later" log message from ERROR to WARN. This message is emitted when the forwarder temporarily suppresses sending transactions to an endpoint that has recently failed, in order to avoid flooding it whilst in an error state.
• Fix an issue preventing the Agent from starting on kernels older than 4.13 because of AmbientCapabilities.
• Fix duplicated logs in Azure App Services after application restart.
• Prevent the file launcher scan from blocking autodiscovery by moving the scan function to a go routine.
• Make context expire with configurable timeout when selecting log source type. Infinite context was masking an error of missing runtime sockets. With this change, expiring context eventually reflects as log source error in agent status log section. Timeout value could be changed by setting logs_config.container_runtime_waiting_timeout in the Agent configuration file. Timeout value provided in seconds.
• Fix Podman log collection without Docker socket being mapped in the container.
• Fix cloudRunPrefix from 'gpc.run' to 'gcp.run'.
• Fixes issue with DogstatsD replay not enriching metrics with the tag state found in the capture file. Now replayed metrics will be enriched using the expected tag state.
• The backoff behavior for the default forwarder was fixed to work properly given a worker now sends multiple transactions concurrently.
• Fixes live process and containers for Agents running as a sidecar in Amazon ECS Managed Instances.
• APM: Fix issue where errors on the debugger or symdb reverse proxy could trigger a panic.
• gpu: the workloadmeta collector will no longer send multiple warn logs if the driver is not loaded
• All internally rebuilt x86_64 dependencies now uniformly target the documented macOS 11.0 minimal ABI. Previously, some still targeted macOS 10.12 or 10.13, even though support for 10.x was dropped in Agent 7.62.0 and numerous x86_64 dependencies were already targeting newer ABI versions.
• Windows: windows_certificate now populates the certificate_thumbprint tag when certificate_subjects filters are used. Previously, the tag was empty, making it impossible to uniquely scope monitors in environments with duplicate subjects.
• Fix issue introduced in 7.70.0 that caused the Windows Event Log check and tailer to fail to load with the error "EvtNext failed: This operation returned because the timeout period expired".

Other Notes

• libarchive and its tools are no longer bundled with the Agent.
• Adds origin tag to APM traces for agents running as a sidecar in AWS ECS Managed Instances.
• During Windows MSI uninstallation, OCI packages are now uninstalled by default. To retain OCI packages, set KEEP_INSTALLED_PACKAGES=1 when running the MSI uninstall.
• libxcrypt is no longer bundled with the Agent.
• Only a minimal set of RPM libraries consisting of librpmio & librpm is now bundled with the agent. The command line tools aren't bundled anymore.
• libmagic and the magic d...

7.72.4

Agent

Prelude

Release on: 2025-12-01

• Please refer to the 7.72.4 tag on integrations-core for the list of changes on the Core Checks

Datadog Cluster Agent

Prelude

Released on: 2025-12-01 Pinned to datadog-agent v7.72.4: CHANGELOG.

Enhancement Notes

• Update Cluster Agent to use latest schema for DatadogPodAutoscaler CRD.

7.72.3

Agent

Prelude

Release on: 2025-11-26

• Please refer to the 7.72.3 tag on integrations-core for the list of changes on the Core Checks

Bug Fixes

• Remove unused trace-loader binary from the heroku build to avoid package size increase

Datadog Cluster Agent

Prelude

Released on: 2025-11-26 Pinned to datadog-agent v7.72.3: CHANGELOG.

Bug Fixes

• Fix a memory leak in the orchestrator check when the Cluster Agent is deployed with multiple replicas and leader-election enabled.

7.72.2

Agent

Prelude

Release on: 2025-11-12

• Please refer to the 7.72.2 tag on integrations-core for the list of changes on the Core Checks

Bug Fixes

• gpu: fix a bug where the gpu.sm_active and gpu.process.{sm_active,dram_active,encoder_utilization,decoder_utilization} metrics were emitting values lower than expected.
• Fix regression in 7.72.0 where the install script on Windows (Install-Datadog.ps1 and datadog-installer-x86_64.exe) does not reinstall the Agent if the same version was just uninstalled.

Datadog Cluster Agent

Prelude

Released on: 2025-11-12 Pinned to datadog-agent v7.72.2: CHANGELOG.