Connecting to Datadog

Using API Key Authentication

To authenticate to Datadog, you need to obtain both an API Key and an Application Key from your Datadog account.

You can then connect by setting the AuthScheme to APIKey and providing your credentials:

AuthScheme: Set this to APIKey.
APIKey: Set this to your API key from Datadog.
ApplicationKey: Set this to your Application key from Datadog.

To obtain your API Key and Application Key:

Log into your Datadog account at https://app.datadoghq.com/
Navigate to Organization Settings > API Keys
Create or copy an existing API Key
Navigate to Organization Settings > Application Keys
Create or copy an existing Application Key

Example connection string

Profile=C:\profiles\Datadog.apip;AuthScheme=APIKey;ProfileSettings="APIKey=your_api_key;ApplicationKey=your_application_key";

Available Tables

The Datadog API Profile provides access to advanced monitoring, logging, security analytics, workflows, cloud integrations, and infrastructure data across more than 60 specialized tables:

APMRetentionFilters – Retrieve retention and sampling rules used to control APM trace storage.
ApplicationKeys – Access Datadog application keys and related metadata.
AuditLogs – Retrieve audit trail records for user activity and configuration changes.
AuthNMappings – Query SAML/SSO authentication mapping configurations.
AWSIntegration – Explore AWS integration configurations and metadata.
AzureIntegration – Explore Azure integration configurations and linked metrics options.
CaseManagement – Retrieve Datadog case management tickets, metadata, and workflows.
CIVisibilityTests – Access Continuous Integration test results and metadata.
CloudCostAWS – View AWS cloud cost insights tracked by Datadog.
CloudCostManagementAzure – View Azure cloud cost data linked to Datadog Cloud Cost Management.
CloudCostManagementGCP – View Google Cloud cost data collected via Datadog.
Containers – Retrieve container-level metrics, tags, and metadata.
DashboardLists – Query dashboard list containers and metadata.
Dashboards – Access fully detailed dashboard configuration definitions.
Downtimes – Retrieve scheduled and active monitor downtimes.
Events – Query Datadog event stream entries such as alerts, notifications, and log events.
FastlyAccountIntegration – Access Fastly service integration configuration.
GCPIntegration – Access GCP integration service accounts and ingestion settings.
Hosts – Explore real-time and historical host status, metadata, and tags.
HostTotals – Retrieve a summary count of hosts reporting to Datadog.
Incidents – Query incident response records, SLA timelines, and associated metadata.
IPAllowlist – Retrieve IP allowlist entries configured for your organization.
IPRanges – View Datadog IP ranges used for agents, APIs, logs, APM, etc.
KeyManagement – Access API keys managed under your Datadog organization.
LogRestrictionQueries – Query log restriction and retention configuration.
LogsArchives – Access log archive configurations for S3, Azure, and GCP.
LogsIndexes – Retrieve configured log indexes and routing filters.
LogsMetrics – Query log-based metric definitions.
LogsPipelines – Retrieve pipeline processors and parsing rules.
Monitors – Access all alerting monitors, states, thresholds, and configurations.
NetworkDeviceMonitoring – Query network devices discovered via SNMP.
Notebooks – Retrieve Datadog notebooks, cells, and metadata.
OktaIntegration – Access Okta integration configuration for logs ingestion.
OpsgenieIntegration – Access Opsgenie integration settings.
Organizations – Retrieve information about your Datadog organization.
Powerpack – Explore installed Powerpacks and configuration used in dashboards.
Processes – Access real-time process monitoring data (command, PID, tags, host).
Roles – Retrieve user roles and permission settings.
RUMApplications – Query Real User Monitoring (RUM) applications configuration.
RumMetrics – Retrieve RUM-based metrics definitions.
SecurityMonitoringRules – Access runtime security and detection rules.
SensitiveDataScanner – Retrieve configurations for PII and sensitive data scanning.
ServiceAccountsApplicationKeys – Access application keys owned by service accounts.
ServiceDependencies – Discover automatic service dependencies detected by Datadog APM.
ServiceLevelObjectives – Query SLOs with thresholds, targets, and evaluation data.
ServiceScorecard – Retrieve service health scorecards and rule outcomes.
SlackIntegration – View Slack workspace integrations and alert routing configuration.
SLOCorrections – Access SLO correction entries such as resets and exclusions.
Spans – Query APM span data for distributed tracing.
SyntheticLocations – Query IPs and metadata for synthetic test locations.
SyntheticTests – Access configuration for Synthetic API & browser tests.
Tags – Retrieve tag configurations applied across hosts and resources.
UsageMetering – Query hourly usage and consumption metrics for your organization.
Users – Access Datadog user accounts, roles, and metadata.
WorkflowAutomation – Retrieve Datadog workflow automation definitions.

Usage Examples

Query APM retention filters:

SELECT * FROM APMRetentionFilters WHERE FilterId = '1234';

Query all application keys:

SELECT * FROM ApplicationKeys;

Query audit logs:

SELECT * FROM AuditLogs WHERE FilterFrom = '1734332400000' AND FilterTo = '1734336000000';

Query authentication mappings:

SELECT * FROM AuthNMappings WHERE MappingId = '1234';

Query AWS integrations:

SELECT * FROM AWSIntegration;

Query Azure integrations:

SELECT * FROM AzureIntegration;

Query case management tickets:

SELECT * FROM CaseManagement WHERE CaseId = '1234';

Query CI Visibility test runs:

SELECT * FROM CIVisibilityTests WHERE FilterFrom = '1734332400000' AND FilterTo = '1734336000000';

Query AWS cloud cost metrics:

SELECT * FROM CloudCostAWS;

Query Azure cloud cost metrics:

SELECT * FROM CloudCostManagementAzure;

Query GCP cloud cost metrics:

SELECT * FROM CloudCostManagementGCP;

Query container metrics:

SELECT * FROM Containers;

Query dashboard lists:

SELECT * FROM DashboardLists WHERE Id = '1234';

Query dashboards:

SELECT * FROM Dashboards WHERE FilterIsShared = 'true';

Query downtimes:

SELECT * FROM Downtimes WHERE Include = 'monitor';

Query event stream:

SELECT * FROM Events WHERE FilterFrom = '1734332400000' AND FilterTo = '1734336000000';

Query Fastly account integrations:

SELECT * FROM FastlyAccountIntegration WHERE AccountId = '1234';

Query GCP integrations:

SELECT * FROM GCPIntegration;

Query hosts:

SELECT * FROM Hosts WHERE IncludeMutedHostsData = true;

Query total number of hosts:

SELECT * FROM HostTotals WHERE FilterFrom = '1734332400000';

Query incidents:

SELECT * FROM Incidents WHERE IncidentId = '1234';

Query IP allowlist entries:

SELECT * FROM IPAllowlist;

Query Datadog IP ranges:

SELECT * FROM IPRanges;

Query API key info:

SELECT * FROM KeyManagement;

Query log restriction queries:

SELECT * FROM LogRestrictionQueries WHERE RestrictionQueryId = '1234';

Query log archives:

SELECT * FROM LogsArchives WHERE ArchiveId = '1234';

Query log indexes:

SELECT * FROM LogsIndexes WHERE IndexName = 'testName';

Query log-based metrics:

SELECT * FROM LogsMetrics WHERE MetricId = '1234';

Query log pipelines:

SELECT * FROM LogsPipelines WHERE PipelineId = '1234';

Query monitors:

SELECT * FROM Monitors WHERE IncludeDowntimes = true;

Query network device monitoring:

SELECT * FROM NetworkDeviceMonitoring WHERE DeviceId = '1234';

Query notebooks:

SELECT * FROM Notebooks WHERE IsTempalte = true;

Query Okta integration:

SELECT * FROM OktaIntegration WHERE AccountId = '1234';

Query Opsgenie integration:

SELECT * FROM OpsgenieIntegration WHERE ServiceId = '1234';

Query organization details:

SELECT * FROM Organizations WHERE PublicId = '1234';

Query Powerpack items used in dashboards:

SELECT * FROM Powerpack WHERE PowerpackId = '1234';

Query processes:

SELECT * FROM Processes WHERE FilterFrom = '1734332400000' AND FilterTo = '1734336000000';

Query roles:

SELECT * FROM Roles WHERE RoleId = '1234';

Query RUM applications:

SELECT * FROM RUMApplications WHERE ApplicationId = '1234';

Query RUM metrics:

SELECT * FROM RumMetrics WHERE MetricId = '1234';

Query security monitoring rules:

SELECT * FROM SecurityMonitoringRules WHERE Id = '1234';

Query sensitive data scanner config:

SELECT * FROM SensitiveDataScanner;

Query application keys linked to service accounts:

SELECT * FROM ServiceAccountsApplicationKeys WHERE ApplicationtId = '1234';

Query service dependencies:

SELECT * FROM ServiceDependencies WHERE ServiceName = 'abc';

Query SLOs:

SELECT * FROM ServiceLevelObjectives WHERE Id = '1234';

Query service scorecard results:

SELECT * FROM ServiceScorecard WHERE FilterRuleId = '1234';

Query Slack integration settings:

SELECT * FROM SlackIntegration WHERE AccountName = 'abc';

Query SLO corrections:

SELECT * FROM SLOCorrections WHERE CorrectionId = '1234';

Query APM spans:

SELECT * FROM Spans WHERE FilterFrom = '2025-02-15 10:00:00' AND FilterTo = '2025-03-15 10:00:00';

Query synthetic locations:

SELECT * FROM SyntheticLocations;

Query synthetic tests:

SELECT * FROM SyntheticTests;

Query tags across resources:

SELECT * FROM Tags WHERE FilterBySource = 'abc';

Query hourly usage metering data:

SELECT * FROM UsageMetering WHERE IncludeBreakdown = true;

Query users:

SELECT * FROM Users WHERE Id = '1234';

Query workflow automation definitions:

SELECT * FROM WorkflowAutomation WHERE WorkflowId = '1234';

Connection Properties

The connection string properties are the various options that can be used to establish a connection. This section provides a complete list of the options you can configure in the connection string for this provider.

Property	Description
APIKey	The API key for authenticating to Datadog (DD-API-KEY header).
ApplicationKey	The application key for authenticating to Datadog (DD-APPLICATION-KEY header).
AuthScheme	The scheme used for authentication. Accepted entry is APIKey. Allowed values are: BASIC, NONE, NTLM, OAUTH, APIKEY, OAUTH_CLIENT