# Datadog

{% hint style="info" %}
This integration is currently in Beta.  
{% endhint %}

## Overview

This article provides a step-by-step guide to setting up the integration between Cisco Identity Intelligence and Datadog, enabling enhanced identity security monitoring and analytics. Cisco Identity Intelligence aggregates identity data from multiple identity providers (IdPs) and applications to deliver comprehensive visibility into identity activity and risks. Integrating Identity Intelligence with Datadog allows organizations to forward identity-related events and alerts to Datadog for monitoring, correlation, and incident response.

### Datadog API Information

General information about Datadog API authentication can be found [here](https://docs.datadoghq.com/api/latest/authentication/). 

More specifically, API and Application Keys information can be found in the Datadog docs [here](https://docs.datadoghq.com/account_management/api-app-keys/).

> **API keys**\
> API keys are unique to your organization. An [API key](https://app.datadoghq.com/organization-settings/api-keys) is required by the Datadog Agent to submit metrics and events to Datadog.
>
> **Application keys**\
> [Application keys](https://app.datadoghq.com/organization-settings/application-keys), in conjunction with your organization’s API key, give users access to Datadog’s programmatic API. Application keys are associated with the user account that created them and by default have the permissions of the user who created them.

## Datadog API Setup

#### Create an API key

1. Go to <https://app.datadoghq.com/organization-settings/api-keys>, OR \
   \
   search for "API Keys" in the global search ("search on the top of the right side drawer") and select API Keys, OR

   <figure><img src="/files/3wTHmjLz4fIHUVVNXWXL" alt=""><figcaption></figcaption></figure>

Hover on the username on the bottom right and select API Keys

<figure><img src="/files/jvHqc7K4REnKt7QOiEtz" alt=""><figcaption></figcaption></figure>

2. Then click "+ New Key", give it a name and click "Create Key"
3. Copy the value, save it somewhere secure and close.

<figure><img src="/files/S6YtRmCRkGCuhXkd7HG6" alt=""><figcaption></figcaption></figure>

<figure><img src="/files/BCe054Eh2Mm65ApI2ZYK" alt=""><figcaption></figcaption></figure>

<figure><img src="/files/QRo35pCESHPBrnOZ83u4" alt=""><figcaption></figcaption></figure>

#### Create the Application Key

Go to <https://app.datadoghq.com/organization-settings/application-keys>, or use any of the methods described above, such as:&#x20;

<figure><img src="/files/4r29O48UTSKDEqh7TqaD" alt=""><figcaption></figcaption></figure>

Then click "+ New Key", give it a name and click "Create Key"

<figure><img src="https://private-user-images.githubusercontent.com/31853965/514068934-3082bba3-6489-4b95-9b13-77374c70e4aa.png?jwt=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.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.EHFUTzWyNjoA2Y5JHLzQPvrSWLQX1TawF96CUQ9NAB0" alt=""><figcaption></figcaption></figure>

Click "Edit" next to the "Scopes" section and check the scopes:

* `audit_logs_read`
* `events_read`
* `user_access_read`
* `api_keys_read`
* `org_app_keys_read`\
  (use the search bar to filter for these values)

<figure><img src="https://private-user-images.githubusercontent.com/31853965/514068137-94e48b25-21ea-4d1b-817e-d901df7f832b.png?jwt=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.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.OHJbuYNhFLnN4Dz7eN6GWJES1-Ewmx22avcWyPHJW0M" alt=""><figcaption></figcaption></figure>

Copy the Key and save it to a secure location.&#x20;

<figure><img src="/files/UN0KMVL5hotyjJFuVgpJ" alt=""><figcaption></figcaption></figure>

#### Datadog API URLs

The default value is `datadoghq.com`. You can consult [this page](https://docs.datadoghq.com/getting_started/site/) for other Datadog app or API URLs.

## Identity Intelligence Integration Setup

1. Under Integrations, select **Add Integration** in the top right corner
2. Select the **Datadog** integration<br>

   <figure><img src="/files/14lVZDVKHY09oQuqAJMp" alt=""><figcaption></figcaption></figure>
3. Provide a display name and enter both the API key and App key.  Change the Site URL if your Datadog tenant is located under a different URL. <br>

   <figure><img src="/files/5GlFf7ieGpwHBIsXBe6l" alt=""><figcaption></figcaption></figure>
4. Select **Connect**&#x20;


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.oort.io/integrations/datadog.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.