About

The Datadog integration connects your Datadog account to ControlMap. It collects your Datadog users and admins, and proof that logs are being collected. This gives you evidence that you know who has access to Datadog and that logging and monitoring are in place.

ControlMap runs these compliance checks for Datadog:

• All admin and normal users accounts in Datadog are identified and must have an employee owner
• Logs are enabled and stored in Datadog
• Monitors are enabled in Datadog
• Incidents are reported and tracked in Datadog

Before you start

You need the following from your Datadog account:

• Setting up integrations from the client portal is part of the Pro plan. For details, see the Free, Essentials and Pro plans article.
• An API key generated in Datadog for ControlMap.
• An application key generated in Datadog for ControlMap.
• The Datadog site your account is on, which you choose as the Account region.

The help panel on the setup page recommends creating keys just for ControlMap, using a Datadog admin's account.

Connect Datadog

1. Go to Monitor › Integrations and select Add Integration.
2. Search for Datadog and select its card. The card is in the Log Management category.

3. On the Connection step, under Configure Connection, fill in all four fields:
   • Connection Name: a name for this connection. ControlMap suggests one that starts with "Integration-datadog".
   • Datadog Api Key: the API key generated for ControlMap from your Datadog account.
   • Datadog Application Key: the application key generated for ControlMap from your Datadog account.
   • Account region: choose your Datadog site from the list.

The Account region list offers these choices:

• United States (US1-East)
• United States (US3-West)
• United States (US5-Central)
• Europe (EU1)
• Japan (AP1)
• United States (US1-FED) - FedRAMP Moderate Authorized

4. Select Next: Checks. ControlMap uses your keys to read the users in Datadog. If it can't read any users, the connection isn't created.
5. Complete the remaining steps as described in the Connect an integration article.

What you'll see after connecting

After the first scan, Datadog's data appears in Monitor:

• Compliance Checks: the four Datadog checks and their results. Checks show No Data until the first scan has run.
• User Accounts: the users and admins collected from Datadog.

The connection's page shows its name, category and status (Checking connection..., Connected, Disconnected or Connection status unavailable) and whether it is Running or Not Running. The Connection, Schedule, Watchers, Logs and Help tabs are described in the Connect an integration article.

Disconnect or change settings

• To change settings or the schedule, go to Monitor › Integrations and open the Datadog card. ControlMap doesn't show the saved keys, so enter both keys again when you edit the Connection tab. See the Connect an integration article for the schedule, scans and Watchers.
• To remove the connection, select the bin icon on its card and choose Yes. Deleting the integration also deletes all of its assets and their compliance status.