Datadog

​

Prerequisites

• Datadog account with API access
• API key (organization settings)
• Application key with read scopes (events_read, logs_read_data, logs_read_index_data, monitors_read)

​

Setup

​

Option 1: Interactive CLI

opensre integrations setup datadog

​

Option 2: Environment variables

DD_API_KEY=your-api-key
DD_APP_KEY=your-application-key
DD_SITE=datadoghq.com          # optional — default datadoghq.com; use datadoghq.eu for EU

​

Option 3: Persistent store

{
  "version": 1,
  "integrations": [
    {
      "id": "datadog-prod",
      "service": "datadog",
      "status": "active",
      "credentials": {
        "api_key": "your-api-key",
        "app_key": "your-application-key",
        "site": "datadoghq.com"
      }
    }
  ]
}

​

Option 4: Hosted web app (OpenSRE Cloud)

​

Creating Datadog keys

​

API key

1. In Datadog, go to Organization Settings → API Keys (direct link)
2. Click + New Key and name it (for example opensre)
3. Copy the key

​

Application key

1. Go to User Settings → Application Keys (direct link)
2. Click + New Key and name it (for example opensre)
3. Under Edit Scope, enable at minimum: events_read, logs_read_data, logs_read_index_data, monitors_read
4. Under Actions API Access, click Enable
5. Copy the key

​

Verify

opensre integrations verify datadog

Service: datadog
Status: passed
Detail: Connected to datadoghq.com and validated API access

​

Troubleshooting

​

Security best practices

• Create a dedicated application key with read-only scopes for investigations.
• Store keys in .env or your secret manager — not in source control.