Datadog

Supported Versions	Type	Authentication Type
SaaS Deployments	Webhook	Org Bearer Token

To set up this integration, start by configuring the native BigPanda integration within Datadog. The Datadog alerting pipeline will send all alerts to BigPanda. BigPanda then processes and correlates the alert data from Datadog to create and maintain up-to-date incidents in BigPanda.

Open Integration Manager

The Open Integration Manager is available for use with this integration. For more information, see the Open Integration Manager documentation.

Payload size

Alert payloads must be 6MB or smaller. Larger payloads will fail to process with BigPanda. We recommend reviewing your configurations to ensure that only actionable, useful information is being sent to BigPanda.

Key Features

Easily send all Datadog alerts to BigPanda with a native integration in Datadog.
Correlate alerts from Datadog Monitors to help you understand and respond faster to production issues.

Data Model

BigPanda normalizes alert data from Datadog into tags. You can use tag values to filter the incident feed and to define filter conditions for Environments. The aggreg_key property is used for deduplication and correlation.

Data Normalization

All properties from the Datadog alert are mapped 1:1 to tags on the BigPanda alert. The below chart describes some special properties of specific Datadog alert tags.

Tag	Description	Additional Info
`host`	Host that triggered the alert. This tag is relevant only when a specific host is selected in the Datadog monitor definition.	Primary Property
`monitor_name`	Name of the monitor in Datadog.	Alternate Primary Property (if host does not exist)
`alert_metric`	Metric that triggered the alert. This tag is relevant only when a specific metric is selected in the Datadog monitor definition. For example: `system.mem.total/free/used` `system.disk.total/used/free` `process.up` `http.can_connect`	Secondary Property
`event_type`	Type of Datadog event. For example: `service_check` `metric_alert_monitor` `query_alert_monitor`	Alternate Secondary Property (if `alert_metric` does not exist)
`alert_query`	Query of the triggered monitor in Datadog.
`description`	Description of the alert. This is the Datadog event message with markdown removed.
`link`	Link to the Datadog event this alert represents.
`last_trigger`	Last trigger time for this Datadog alert.	Parsed from the Datadog event message.
`logs_link`	Link to related logs in Datadog, if they exist.	Parsed from the Datadog event message.
`monitor_link`	Link to the actual Datadog monitor that this alert is generated by.	Parsed from the Datadog event message.
`processes_link`	Link to related processes in Datadog, if they exist.	Parsed from the Datadog event message.
`resource_link`	Link to the related resource in Datadog, if it exists.	Parsed from the Datadog event message.
`tags`	An array of tags on the Datadog monitor without associated keys (values only).
XXX (Datadog tags)	All tags on the Datadog monitor which are in `key:value` format are mapped directly to corresponding tags on the BigPanda alert.	status and description tags are reserved keys on the BigPanda alert and any Datadog monitor tags with these keys will be renamed to `tag.KEY`

Statuses

BigPanda will automatically correlate a Datadog status into a BigPanda status that can be used to search and filter incidents.

Datadog Status	BigPanda Status
`triggered, retriggered`	Critical
`warn`	Warning
`recovered`	Ok
`no data`, `re-no data`	Unknown

Install the Integration

Install the integration by following these steps:

Create an App Key

Create an app key in BigPanda.

Integration specific

You'll need a separate app key for each integrated system.

https://files.readme.io/9865f2f-Integrations_App_Key_Creation.jpg

App Key Configuration in BigPanda

Install the BigPanda Integration in Datadog

From the left sidebar in Datadog select Integrations > Integrations
Search for the BigPanda integration and then click on the BigPanda tile
Input the following details into the integration installation form:
- Account Name: (Your Big Panda Organization Name)
- Access Token: <Your Org Bearer Token>
- App Key: <Your App Key>
- Endpoint Type: Custom
- Custom URL:
  https://integrations.bigpanda.io/datadog_v2/alerts?access_token=<Your Org Bearer Token>&app_key=<Your App Key>
  OR
  https://integrations.bigpanda.io/datadog_v2/alerts? - You must include the ? as part of the URL
Click Save

Route all monitor events

DataDog can enable the ability to route all future events to BigPanda automatically. Reach out to DataDog support and ask them to turn on the "Route all monitor events" functionality in your BigPanda integration. Once enabled, you can select Yes to route all events to BigPanda. All events, including those for alerts configured at a later date, will be automatically added to route to BigPanda.

Delete the Integration

Deleting an integration requires that you remove the integration in both the integrated system and BigPanda. We recommend that you first uninstall the integration on the integrated system to prevent traffic from being sent and rejected by BigPanda, since the app key will not exist once you delete the integration in BigPanda.

Caution during replacement

When replacing an existing integration with a new tool or system, we recommend configuring the new integration first to ensure no data is lost.

Deactivate Inbound Integration

If you want to stop sending data to BigPanda but don’t want to delete your integration, you can temporarily deactivate it.

To deactivate an inbound integration:

In BigPanda, navigate to the Integrations tab and select the desired integration from the list. This will open integration details on the right side of the window.
At the top of the integration details, click the Active/Inactive toggle next to the application name to change the status of the integration.

In the integrations list, inactive integrations will be marked with a gray bar.

Stop Sending Data to BigPanda

In Datadog, go to the BigPanda integration tile.
Under the Configuration tab click Uninstall Integration.

Manually Resolve All Open Alerts

Manually resolve any open alerts sent from the integration to remove the associated incidents from your incident feed. These incidents will not automatically resolve without an ok status from the original sending integration.

Delete the Integration in BigPanda

Take the following steps to delete the integration from BigPanda:

In BigPanda, navigate to the Integrations tab and select the desired integration from the list.
In the integration details on the right of the page, click the trash icon, then confirm you want to delete the integration. The integration will be removed immediately.

️Automatic alert resolution for deleted integrations

All active alerts from the integration will be resolved after deletion.

Data removal

This procedure does not remove any data from the integrated system.

In this section: