Skip to main content

Datadog integration

You can use a Moogsoft Cloud custom integration to ingest events from Datadog.

Before you begin

Before you set up your Datadog integration:

  • Make sure you are signed in to your Moogsoft instance.

  • Make sure you are signed in to Datadog.

Create a custom integration in Moogsoft

  1. Within Moogsoft, navigate to Integrations > Ingestion Services > Create your own Integration.

  2. Click Add New Integration.

  3. Under Moogsoft Endpoint, enter a unique name for your new integration (required).


    The name of the integration can be anything you choose. Moogsoft will automatically generate an API endpoint URL independent of what you enter for this field.

  4. Under API Description, enter a description for the integration (optional).

  5. Under Data Type, select Events.

  6. Click Save.

  7. Keep the web page for this integration open in your browser while you complete the following steps in Datadog.

Create a webhook in Datadog

  1. Within Datadog, click on Integrations.

  2. Click on Webhooks and create a new webhook.

  3. Provide a unique name for the new webhook, such as "Moogsoft."

  4. In the URL field, paste the endpoint URL for your Moogsoft instance.

    The endpoint URL is provided for you in Moogsoft on the page for your custom integration, under Configuration Information > Moogsoft Endpoint.

  5. Under Payload, delete the default payload text and replace it with the following:

    {"host": "$HOSTNAME",
    "title": "$EVENT_TITLE",
       "alert_metric": "$ALERT_METRIC",
       "alert_query": "$ALERT_QUERY",
       "body": "$EVENT_MSG",
       "body_clean": "$TEXT_ONLY_MSG",
       "link": "$LINK",
       "tags": "$TAGS",
       "event_type": "$EVENT_TYPE",
       "priority": "$PRIORITY",
       "alert_status": "$ALERT_STATUS",
       "alert_transition": "$ALERT_TRANSITION",
       "last_updated": "$LAST_UPDATED",
       "date": "$DATE",
       "email": "$EMAIL",
       "datadog_org_name": "$ORG_NAME",
       "datadog_org_id": "$ORG_ID",
       "aggreg_key": "$AGGREG_KEY"
  6. Enable Custom Headers and paste the following header into the field that appears. Replace the placeholder text with your Moogsoft API key:

        "apiKey": "your-Moogsoft-API-key-here"
  7. Click Save.

  8. Send a test payload to Moogsoft:

    1. Close the webhook window and navigate to Monitors > Manage Monitors.

    2. Click on a monitor that you wish to send data from to Moogsoft.

    3. On the page for the monitor you selected, click the gear icon in the top right and select Edit.

    4. Scroll down to the Notify your team section and add the webhook that you created. In the following example, "MoogsoftIntegration" is the name of the Datadog webhook:

    5. Scroll down to the bottom of the screen and click Test Notifications > Select All > Run Test.

      This will send a test payload to your Moogsoft integration.

    6. Save the changes you made to the monitor.

    7. Repeat these steps to add the webhook to other monitors within Datadog.

Configure the custom integration in Moogsoft

  1. Go to your Moogsoft instance.

  2. Open the page for your custom integration by going to Integrations > Ingestion Services > Create your own Integration > your-integration-name.

  3. In the Map Your Data section, you can view cached payloads of incoming events sent from Datadog. Confirm that the test payload you sent is there.

  4. Map your payload fields to the corresponding Moogsoft fields. An example mapping is provided for you below as a reference, but you should tailor the mapping according to your business needs.

    For a complete list of mapping types, save options, and instructions on how to use them, read Use mapping types in custom integrations.

    Table 1. Example mapping

    Datadog fields

    Moogsoft field



    title, body_clean






    Click Map Values and map the severity values according to the Severity Mapping table below.



    Enter Datadog as the default value and leave this field blank.




    Table 2. Severity mapping

    Datadog severity field

    Moogsoft severity field









    No data


    Re-no data


  5. Go to the top of the page and click Save.

Configure the event workflow in Moogsoft

  1. Within Moogsoft, navigate to Correlate & Automate > Workflow Engine.

  2. In the Event Workflows page, click Add Workflow.

  3. Provide a unique name for the workflow, such as "Split Datadog tags." Optionally, provide a description.

  4. Under Trigger, set the Event Filter to the following:

    manager = Datadog
  5. Add a Split Tags action to the workflow. For instructions on adding actions to workflows, read Event workflow configuration example.

  6. Configure the Split Tags action as follows:

    • Input Field: tags.ddtags


      It may take a while for tags.ddtags to show up as a selectable field. If tags.ddtags is not appearing as an option, keep sending test notification payloads from your Datadog monitor and refresh your Moogsoft instance periodically.

    • Split Field: ,

    • Separator String: :

  7. Save and then Enable your workflow.