Datadog Setup

Integration to send P0 audit logs to Datadog.

This topic describes how to set up P0's integration for Datadog Logs. It has the following sections:

Prerequisites

  • Existing P0 account at p0.apparrow-up-right

  • Datadog account with permissions to create API keys

  • Datadog Logs intake URL for your region

Setup Datadog logs intake

circle-info

This setup takes about 5 minutes.

  1. Navigate to "Integrations" on p0.apparrow-up-right, then select "Datadog" under "Security Information & Event Managers" section. Choose the "Logs intake" component.

  2. Click on "Add API Key" to install.

  3. Enter a unique custom identifier and click "Next".

  4. Enter the desired configuration and click "Finish" to complete the installation. See the configuration section for information about the settings.

Configure Datadog logs intake

Intake URL

The Datadog Logs intake URL varies by region. Use the appropriate URL for your Datadog site:

Datadog Site
Intake URL

US1

https://http-intake.logs.datadoghq.com

US3

https://http-intake.logs.us3.datadoghq.com

US5

https://http-intake.logs.us5.datadoghq.com

EU

https://http-intake.logs.datadoghq.eu

AP1

https://http-intake.logs.ap1.datadoghq.com

circle-info

Refer to the Datadog documentationarrow-up-right to find your Datadog site.

API key

You must provide a Datadog API key to authenticate log submissions. To create an API key:

  1. In Datadog, navigate to Organization Settings > API Keys.

  2. Click New Key.

  3. Enter a name for the key (for example, "P0 Security").

  4. Copy the key value and paste it into the P0 configuration.

circle-info

Refer to the official Datadog documentation for detailed instructions: API and Application Keysarrow-up-right.

Service

Optional service name for log attribution. If not specified, defaults to p0. This value appears in the service field of your Datadog logs, allowing you to filter P0 audit logs.

circle-check

Last updated