Skip to main content

​
Overview

Connect your Datadog account to give TierZero read-only access to your telemetry data. TierZero uses Datadog to query logs, metrics, traces, events, and RUM data during investigations.

​
Prerequisites

  • Administrative access to your Datadog account
  • Permission to create API and Application keys

​
Setup Instructions

​
Step 1: Navigate to Integration Settings

  1. Log into your TierZero dashboard
  2. Go to Settings → Integrations
  3. Click Connect next to Datadog

​
Step 2: Create an API Key

  1. In Datadog, navigate to Organization Settings → API Keys
  2. Click New Key
  3. Name it (e.g., “TierZero Integration”) and click Create Key
  4. Copy the API key and paste it into the API Key field in TierZero

​
Step 3: Create an Application Key

  1. In Datadog, navigate to Organization Settings → Application Keys
  2. Click New Key
  3. Name it (e.g., “TierZero Integration”) and click Create Key
  4. Edit the scope to include all required permissions:
You must select each permission individually. Missing permissions will prevent TierZero from accessing the corresponding data.
Required permissions:
  • All *_read permissions (for reading metrics, logs, and traces)
  • All logs_read_* permissions (for log access)
  • timeseries_query permission (for querying metrics)
  1. Copy the Application key and paste it into the Application Key field in TierZero

​
Step 4: Select Your Datadog Site

Select the site that matches your Datadog account:
SiteDomain
US1datadoghq.com
US3us3.datadoghq.com
US5us5.datadoghq.com
EU1datadoghq.eu
AP1ap1.datadoghq.com
AP2ap2.datadoghq.com

​
Step 5: Verify Connection

Click Connect and verify the integration shows as connected.

​
What TierZero Accesses

Once connected, TierZero has read-only access to:
  • Metrics and timeseries data: query and visualize metrics
  • Logs and log aggregations: search and analyze log entries
  • APM traces and spans: distributed tracing data
  • Events: Datadog events and alerts
  • RUM data: Real User Monitoring sessions and errors
  • CI/CD pipeline events: build and deployment telemetry
  • Dashboards and notebooks: imported via Integration Resources

​
Integration Resources

After connecting Datadog, configure Integration Resources to help TierZero understand your Datadog setup:
  • logs_tags.json: Tags and attributes used in your logs
  • spans_tags.json: Tags and attributes used in your spans
  • metrics.json: List of important metrics
  • dashboards.json: Imported dashboards
  • notebooks.json: Imported notebooks

​
Security

  • TierZero only requires read-only access; no write permissions are needed
  • API keys are encrypted at rest and in transit
  • Revoke access at any time by deleting the keys in your Datadog account

​
Troubleshooting

​
”Unauthorized” Errors

  • Verify the API key and Application key are correct
  • Ensure the Application key has all required read permissions
  • Check that you selected the correct Datadog site

​
Missing Data

  • Confirm the Application key has the specific permission for the data type (e.g., logs_read_data for logs)
  • Verify the data exists in your Datadog account for the time range being queried