Datadog Integration
Security signals and traces from Datadog fused with your threat timeline.
What this integration does
Datadog meets agentic SOC
Datadog is a leading observability platform that also provides cloud SIEM and CSPM capabilities. ManySignal ingests Datadog Security Signals, Cloud SIEM events, and Compliance findings via the Datadog Events API, correlating security signals with application performance and infrastructure telemetry for enriched context.
Security Signal ingestion from Datadog Cloud SIEM
Compliance finding ingestion from Datadog CSPM
Datadog Logs query for raw event context
Data collected
- Cloud SIEM security signals
- CSPM compliance findings
- Datadog Infrastructure events
- Application performance anomaly signals
Actions supported
- Create Datadog event with ManySignal verdict
- Add tag to Datadog host resource
- Trigger Datadog monitor mute for false positive
- Create Datadog incident
Getting started
Set up in minutes
- 1
Create a Datadog API key
- 2
Create an application key
- 3
Configure the connector
Datadog Integration: frequently asked questions
Is Datadog Cloud SIEM required?
Datadog Cloud SIEM is required for Security Signal ingestion. The Logs and Infrastructure integrations work with any Datadog plan that includes Logs Management.
Related integrations
Amazon Web Services Integration
Integration
Aws Cloudtrail Integration
Integration
Aws Guardduty Integration
Integration
Aws Security Hub Integration
Integration
Aws Config Integration
Integration
Aws Vpc Flow Logs Integration
Integration
Microsoft Azure Integration
Integration
Azure Activity Logs Integration
Integration
Microsoft Entra Id Integration
Integration
Microsoft Defender Integration
Integration
Microsoft Defender For Cloud Integration
Integration
Microsoft Defender For Identity Integration
Integration
See the agentic SOC in action
Watch AI agents work a real alert queue — verdicts, evidence, and confidence scores included. In-house SOC or MDR, your call.