update with log instructions
@@ -21,13 +21,61 @@ To install the Aqua check on your host:
### Configuration
-To configure the Aqua check:
-1. Create a `aqua.d/` folder in the `conf.d/` folder at the root of your Agent's directory.
-2. Create a `conf.yaml` file in the `aqua.d/` folder previously created.
-3. Consult the [sample conf.yaml][3] file and copy its content in the `conf.yaml` file.
-4. Edit the `conf.yaml` file with your Aqua API credentials.
-5. [Restart the Agent][4].
+1. Edit the `aqua.d/conf.yaml` file in the `conf.d/` folder at the root of your [Agent's configuration directory](https://docs.datadoghq.com/agent/faq/agent-configuration-files/#agent-configuration-directory) to start collecting your Aqua [metrics](#metric-collection) and [logs](#log-collection).
+ See the [sample conf.yaml][3] for all available configuration options.
+
+#### Metric Collection
+
+1. Add this configuration block to your `aqua.d/conf.yaml` file to start gathering your [Aqua Metrics](#metrics):
+
+```
+instances:
+ - url: http://your-aqua-instance.com
+ api_user: <api_username>
+ password: <api_user_password>
+```
+
+Change the `api_user` and `password` parameter values and configure them for your environment.
+
+[Restart the Agent][4].
+
+#### Log Collection
+
+There are two types of logs generated by Aqua:
+
+* Aqua audit logs
+* Aqua enforcer logs
+
+To collect Aqua audit logs:
+
+1. Connect to your Aqua account
+2. Go to the `Log Management` Section of the `Integration` Page
+3. Activate the Webhook integration
+4. Enable it and add the following endpoint: `https://http-intake.logs.datadoghq.com/v1/input/<DATADOG_API_KEY>?ddsource=aqua`
+
+* Replace `<DATADOG_API_KEY>` by your [Datadog Api Key](https://app.datadoghq.com/account/settings#api).
+* *Note*: For the EU region, replace `.com` by `.eu` in the endpoint.
+
+For the Aqua Enforcer logs: **Available for Agent >6.0**
+
+* Collecting logs is disabled by default in the Datadog Agent. Enable it in your [daemonset configuration](https://docs.datadoghq.com/agent/kubernetes/daemonset_setup/#log-collection):
+
+```
+(...)
+ env:
+ (...)
+ - name: DD_LOGS_ENABLED
+ value: "true"
+ - name: DD_LOGS_CONFIG_CONTAINER_COLLECT_ALL
+ value: "true"
+(...)
+```
+
+* Make sure that the Docker socket is mounted to the Datadog Agent as done in [this manifest](https://docs.datadoghq.com/agent/kubernetes/daemonset_setup/#create-manifest).
+
+* [Restart the Agent][4].
+
### Validation
