Use DoControl's security automated workflows to create sophisticated, flexible and granular business logic with Datadog's log and incident capabilities.
DoControl consolidates end-user activity events and asset metadata across your SaaS apps to provide a centralized view of all SaaS activity and asset exposure.
DoControl provides deep actionable insights and visibility into your entire SaaS app ecosystem.
DoControl integrates with the most popular SaaS apps in multi-segments, including apps that fall into the categories of Collaboration, CRM, Communication, Dev tools, HR, IdP, EDR and more.
DoControl provides a broad catalog of pre-established, ready-to-use playbooks, representing common threat models and mission critical use cases to protect.
DoControl's cross-SaaS anomaly detection mechanism triggers contextual alerts to reduce incident response time and provide auto-remediate measures.
DoControl provides visibility into and enables remediation for the inventories of all your SaaS apps, including 3rd party apps (OAuth apps) - a major threat vector.
Overview
This integration allows DoControl customers to forward their DoControl-related logs and events to Datadog through automated security workflows.
Setup
To set up this integration, you must have an active DoControl account. You must also have proper admin permissions in Datadog.
Installation
No installation is required on your host.
Use Datadog actions in DoControl’s workflows
You must create a Datadog API key and an application key to use as input parameters for Datadog actions in DoControl.
Create an API key in Datadog
- Use Datadog’s Add an API key documentation to create an API key. Give the key a meaningful name such as
DoControl. - Copy the
Key and save it.
Create an application key in Datadog
- Use Datadog’s Add application keys documentation to create an application key.
- Copy and save your application key.
Create a Datadog integration in DoControl
In DoControl, navigate to Dashboard->Settings->Workflows->Secrets, and add your Datadog API key as a new secret.
Create a new Workflow from a pre-established playbook or from scratch.
Design and edit your business logic by dragging and dropping actions onto the canvas, configuring the steps, and connecting them.
From the Actions bar, under Utilities, you can drag and drop Datadog actions into your Workflow, such as Send logs or Create incident.
Configure the actions to refer to the DD-API-KEY stored as a secret in Step 1 above, and the DD-APPLICATION-KEY obtained in Create an application key in Datadog.
Learn more about DoControl in the DoControl documentation.
Support
Need help? Contact Datadog support or DoControl support.
