# Datadog

{% hint style="info" %}
Datadog is an SIEM integration. SIEM integrations are used to perform analysis of any SIEM generated alerts, and/or to use generated data as part of investigation analysis.
{% endhint %}

The Dropzone platform integrates with the [Datadog](https://www.datadoghq.com/) security SIEM. Many customers ingest other alert sources into DataDog (e.g. IDPs) and integrate Dropzone into DataDog rather than the source systems.

## Create an API Key and Application Key

Datadog requires both an API Key and an Application Key to enable.

To obtain an API Key, do the following:

* In the bottom left hand corner of your Datadog Dashboard, click on your organization icon
* Navigate to Organization Settings > API Keys

<figure><img src="/files/0UVoscMOXYNi13t4rJ9D" alt=""><figcaption><p>Navigate to API Keys</p></figcaption></figure>

* Click "New Key"

<figure><img src="/files/x4CaASHGv1jYYroCRBW0" alt=""><figcaption><p>Click "New Key"</p></figcaption></figure>

* Name your token something memorable, such as "dropzone.ai," then click "Create Key"

<figure><img src="/files/8MjtFMjYRKyFt6nAanj3" alt=""><figcaption><p>Create Key</p></figcaption></figure>

* Copy the key generated for use later in the Dropzone UI where it is called "API Key," then click "Finish"

<figure><img src="/files/sFaw2roj8koldmHRDPl9" alt=""><figcaption><p>Copy the key</p></figcaption></figure>

To obtain an Application Key, do the following:

* In the bottom left hand corner of your Datadog Dashboard, click on your organization icon
* Navigate to Organization Settings > Application Keys

<figure><img src="/files/0UVoscMOXYNi13t4rJ9D" alt=""><figcaption><p>Navigate to Application Keys</p></figcaption></figure>

* Click "New Key"

<figure><img src="/files/x4CaASHGv1jYYroCRBW0" alt=""><figcaption><p>Click "New Key"</p></figcaption></figure>

* Name the key something memorable, such as "dropzone.ai," then click "Create Key"

<figure><img src="/files/8MjtFMjYRKyFt6nAanj3" alt=""><figcaption><p>Create Key</p></figcaption></figure>

* In the "Scope" section, select "Edit"

<figure><img src="/files/yBJPzyjiAenAnU4dCuJH" alt=""><figcaption><p>Edit Scopes</p></figcaption></figure>

* Assign the key the following scopes, then click "Save":
  * logs\_read\_data
  * security\_monitoring\_signals\_read

<figure><img src="/files/4uHaDV8wUzoi0fTmhqnF" alt=""><figcaption><p>Assign scopes</p></figcaption></figure>

* Copy the key generated for use later in the Dropzone UI where it is called "Application Key," then click "Finish"

<figure><img src="/files/7pJkEbj7NVPT736R8RwF" alt=""><figcaption><p>Copy the key</p></figcaption></figure>

## Enable Datadog

To enable the Data Source integration, you will need the following information:

| Dropzone Field  | Source                                                                      |
| --------------- | --------------------------------------------------------------------------- |
| API Key         | The API key value you generated earlier                                     |
| Application Key | The Application key value you generated earlier                             |
| Datadog site    | The same as your url in Datadog, e.g. datadoghq.com, us3.datadoghq.com, etc |

* Navigate to your Dropzone AI tenant home page e.g. https\://*mycompany*.dropzone.app
* In the bottom left hand corner, navigate to Settings > Integrations

<figure><img src="/files/zN02u3HObDaemUY8E1kD" alt=""><figcaption><p>Integrations Dropdown</p></figcaption></figure>

* Click "Available"

<figure><img src="/files/brI7n2Ux40Tk0jTwBCVh" alt=""><figcaption><p>Click Available</p></figcaption></figure>

* In the Search bar, search Datadog, then click "Configure"

<figure><img src="/files/ZQ5t9PorhUsEVvyKlEYB" alt=""><figcaption><p>The Datadog Tile</p></figcaption></figure>

* Under the Data Source heading, input the API Key, Application Key, and your Datadog site
* If you wish to enable Datadog's [Flex Logs](https://docs.datadoghq.com/logs/log_configuration/flex_logs/), check the box labeled "Enabled" in the Flex Logs section

<figure><img src="/files/7ngr0v50LHtZSeSLzAcY" alt=""><figcaption><p>The Datadog Data Source Configuration</p></figcaption></figure>

* Click "Test & Save" to finish

If you have any errors engage your Dropzone AI support representative.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.dropzone.ai/integrations/data/datadog_data.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.