> ## Documentation Index
> Fetch the complete documentation index at: https://docs.tierzero.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Datadog

> Monitor and analyze logs, metrics, and traces from Datadog

## Overview

Connect your Datadog account to give TierZero read-only access to your telemetry data. TierZero uses Datadog to query logs, metrics, traces, events, and RUM data during investigations.

## Prerequisites

* Administrative access to your Datadog account
* Permission to create API and Application keys

## Setup Instructions

### Step 1: Navigate to Integration Settings

1. Log into your TierZero dashboard
2. Go to **Settings → Integrations**
3. Click **Connect** next to Datadog

### Step 2: Create an API Key

1. In Datadog, navigate to **Organization Settings → API Keys**
2. Click **New Key**
3. Name it (e.g., "TierZero Integration") and click **Create Key**
4. Copy the API key and paste it into the **API Key** field in TierZero

### Step 3: Create an Application Key

1. In Datadog, navigate to **Organization Settings → Application Keys**
2. Click **New Key**
3. Name it (e.g., "TierZero Integration") and click **Create Key**
4. Edit the scope to include all required permissions:

<Warning>
  You must select each permission individually. Missing permissions will prevent TierZero from accessing the corresponding data.
</Warning>

**Required permissions:**

* All `*_read` permissions (for reading metrics, logs, and traces)
* All `logs_read_*` permissions (for log access)
* `timeseries_query` permission (for querying metrics)

5. Copy the Application key and paste it into the **Application Key** field in TierZero

### Step 4: Select Your Datadog Site

Select the site that matches your Datadog account:

| Site | Domain              |
| ---- | ------------------- |
| US1  | `datadoghq.com`     |
| US3  | `us3.datadoghq.com` |
| US5  | `us5.datadoghq.com` |
| EU1  | `datadoghq.eu`      |
| AP1  | `ap1.datadoghq.com` |
| AP2  | `ap2.datadoghq.com` |

### Step 5: Verify Connection

Click **Connect** and verify the integration shows as connected.

## What TierZero Accesses

Once connected, TierZero has read-only access to:

* **Metrics and timeseries data**: query and visualize metrics
* **Logs and log aggregations**: search and analyze log entries
* **APM traces and spans**: distributed tracing data
* **Events**: Datadog events and alerts
* **RUM data**: Real User Monitoring sessions and errors
* **CI/CD pipeline events**: build and deployment telemetry
* **Dashboards and notebooks**: imported resource context

## Integration Resources

After connecting Datadog, TierZero uses these resource catalogs to understand your Datadog setup:

* **logs\_tags.json**: Tags and attributes used in your logs
* **spans\_tags.json**: Tags and attributes used in your spans
* **metrics.json**: List of important metrics
* **dashboards.json**: Imported dashboards
* **notebooks.json**: Imported notebooks

## Security

* TierZero only requires **read-only access**; no write permissions are needed
* API keys are encrypted at rest and in transit
* Revoke access at any time by deleting the keys in your Datadog account

## Troubleshooting

### "Unauthorized" Errors

* Verify the API key and Application key are correct
* Ensure the Application key has all required read permissions
* Check that you selected the correct Datadog site

### Missing Data

* Confirm the Application key has the specific permission for the data type (e.g., `logs_read_data` for logs)
* Verify the data exists in your Datadog account for the time range being queried