Datadog

React to Datadog alerts automatically — mute monitors during maintenance, create incidents when alerts fire, post events to the event stream, and query metric data to inform automation logic.

Authentication

Auth type: API Key + Application Key Create both keys in Datadog → Organization Settings → API Keys / Application Keys.

Credential	Description
API Key	Datadog API key
Application Key	Datadog application key (required for read operations)
Site	Optional — set to `datadoghq.eu` for EU customers. Leave blank for US1.

Triggers

Trigger	When it fires
Alert Triggered	A monitor transitions to ALERT state
Alert Recovered	A monitor recovers from ALERT state
Incident Created	A new incident is opened in Datadog

Actions

Action	Key inputs	Key outputs
Send Event	`title`, `text`, `alertType` (info/warning/error/success), `tags`, `host`	eventId, url
Query Metrics	`query` (Datadog metric query), `from` (seconds ago or Unix timestamp), `to`	series[], queryTime
Get Monitor	`monitorId`	monitorId, name, status, type
Mute Monitor	`monitorId`, `end` (ISO 8601 datetime, blank = indefinite)	monitorId, name, status
Create Incident	`title`, `severity` (SEV-1 to SEV-5), `customerImpacted`, `notificationMessage`	incidentId, title, severity, url
List Monitors	`status` filter, `limit`	monitors[], count

For Query Metrics, if from is less than 86400 (one day in seconds), it is interpreted as “N seconds ago from now”. Otherwise it is treated as an absolute Unix timestamp.

Last modified on April 2, 2026