Datadog

This integration allows sending all threat notifications to Datadog using the HTTP Logs endpoint.

Steps to set up the Verosint integration with Datadog:

1. Log in to Verosint and navigate to the workspace settings page.

2. Click Add next to the Datadog logo on the Threat Notifications card

3. Fill out the required details

   1. URL: The URL of the HTTP Logs intake endpoint. The default value is shown for the US1 region. You can use the linked page to change the region and find the appropriate URL if the default is not acceptable. The full list of intake endpoints (see the above link for the up-to-date list):

      Region	URL
      US1	https://http-intake.logs.datadoghq.com/api/v2/logs
      US3	https://http-intake.logs.us3.datadoghq.com/api/v2/logs
      US5	https://http-intake.logs.us5.datadoghq.com/api/v2/logs
      EU	https://http-intake.logs.datadoghq.eu/api/v2/logs
      AP1	https://http-intake.logs.ap1.datadoghq.com/api/v2/logs
      US1-FED	https://http-intake.logs.ddog-gov.com/api/v2/logs

   2. API Key: The API key that is authorized to send logs.

   3. Tags: Tags that should be sent with each threat notification (optional).

📘

Testing Notifications

It is recommended to send a test notification to validate that all parameters are set correctly. It will also enable the Datadog administrator to see and configure alerts based on the attributes of the threat notification.

Datadog Attributes Populated In Threat Notifications