search close

Datadog

access_time Updated Jun 29, 2022

Events Feed

Our Datadog event integration creates an event when IPs are flagged on Signal Sciences.

Adding a Datadog integration

  1. Log in to Datadog.

  2. Click Integrations in the navigation bar on the left. The integrations menu page appears.

  3. Click the APIs tab. The integrations API menu page appears.

  4. Click Create API Key button. The new API key menu appears.

  5. Create a new API key by following the steps.

  6. Copy the provided API Key.

  7. Log in to the Signal Sciences console.

  8. Select a site if you have more than one site.

  9. From the Manage menu, select Site Integrations. The site integrations menu page appears.

  10. Click Add site integration. The add site integration menu page appears.

  11. Select the Datadog Alert integration. The Datadog Alert integration setup page appears.

  12. In the API Key field, enter the API Key created in Datadog.

  13. Select if you want to be alerted regarding All activity or Specific activity.

  14. If you selected Specific activity, use the Activity menu to choose which types of activities you want the integration to create alerts for.

  15. Click Create site integration.

Activity types

Activity type Description
flag An IP was flagged
agentAlert An agent alert was triggered

Dashboard

Datadog has a default dashboard which is populated with StatsD metrics from the Signal Sciences agent. To use this functionality:

  1. Find and install the Signal Sciences integration tile in Datadog integrations tab.

  2. Confirm that the Datadog agent is configured to listen for StatsD events: https://docs.datadoghq.com/developers/dogstatsd/

  3. Configure the Signal Sciences agent to use dogstatsd:

    • Add the following line to each agent’s agent.config file:

      statsd-type = "dogstatsd"
    • When this is done the agent’s statsd client will have tagging enabled and metrics such as sigsci.agent.signal.<SIGNAL_TYPE> will be sent as sigsci.agent.signal and tagged with signal_type:<SIGNAL_TYPE>.

      • Example:
sigsci.agent.signal.http404 => sigsci.agent.signal tag signal_type:http404
    • If using Kubernetes to run the Datadog Agent, make sure to enable DogStatsD non local traffic as described in the Kubernetes DogStatsD documentation.

  4. Configure the SigSci agent to send metrics to the Datadog agent:

    • Add the following line to each agent’s agent.config file:

      statsd-address="<DATADOG_AGENT_HOSTNAME>:<DATADOG_AGENT_PORT>"
  5. Verify that the “Signal Sciences - Overview” dashboard is created and starting to capture metrics.