Linking Datadog as a source
This source is currently in alpha. The interface and available tables may change.
Connect your Datadog account to sync logs, events, monitors, dashboards, and more into the PostHog data warehouse.
Adding a data source
- Go to the sources tab of the data pipeline section in PostHog.
- Click + New source and then click Link next to Datadog.
- Create an API key and an application key in your Datadog organization settings. Grant the application key read scopes for the data you want to sync, for example
dashboards_read,monitors_read,incident_read,slos_read,synthetics_read, anduser_access_read. Also note your Datadog site (for example US1datadoghq.com, US3, US5, EU1datadoghq.eu, AP1, or US1-FEDddog-gov.com). - Back in PostHog, select your Datadog site, enter the API key and Application key, then click Next.
- Select the tables you want to sync, set the sync method and frequency, then click Import.
Once the syncs are complete, you can start using Datadog data in PostHog.
Available tables
| Table | Description | Sync method |
|---|---|---|
logs | Log events (limited to your account's retention window on initial sync) | Incremental |
audit_logs | Audit log events (limited to your account's retention window on initial sync) | Incremental |
events | Events (limited to your account's retention window on initial sync) | Incremental |
dashboards | Dashboards | Full refresh |
monitors | Monitors | Full refresh |
users | Users | Full refresh |
incidents | Incidents | Full refresh |
slos | Service level objectives | Full refresh |
synthetic_tests | Synthetic tests | Full refresh |
downtimes | Downtimes | Full refresh |
Incremental tables sync only new or updated records on each run. Full refresh tables reload all data on each sync.
Sync limitations
Logs, audit logs, and events read access is governed by your Datadog account's data retention, so the first sync can only reach back as far as your account's retention window allows.
Configuration
| Option | Type | Required |
|---|---|---|
Datadog site | select | Yes |
API key | password | Yes |
Application key | password | Yes |
Supported tables
| Table | Description | Sync method | Incremental field | Primary key |
|---|---|---|---|---|
logs | Limited to your Datadog account's retention window on initial sync | Incremental, Full refresh | timestamp | — |
audit_logs | Limited to your Datadog account's retention window on initial sync | Incremental, Full refresh | timestamp | — |
events | Limited to your Datadog account's retention window on initial sync | Incremental, Full refresh | timestamp | — |
dashboards | A Datadog dashboard — a configurable set of widgets visualizing metrics and logs. | Full refresh | — | — |
monitors | A monitor that watches a metric, log, or check and alerts when conditions are met. | Full refresh | — | — |
users | A user account in the Datadog organization. | Full refresh | — | — |
incidents | An incident tracked in Datadog Incident Management. | Full refresh | — | — |
slos | A service level objective (SLO) defining a reliability target over a time window. | Full refresh | — | — |
synthetic_tests | A Synthetic monitoring test (API or browser test) that probes endpoints or flows. | Full refresh | — | — |
downtimes | A scheduled downtime that mutes monitor alerts over a time window. | Full refresh | — | — |