Overview

This integration enables the collection of HCP Terraform (formerly known as Terraform Cloud) audit trail log data for Datadog Cloud SIEM.

• Control your HCP Terraform data retention.
• Build custom widgets and dashboards.
• Set up Cloud SIEM detection rules using the out-of-the-box Logs Pipeline.
• Cross-reference HCP Terraform events with the data from other services.

After parsing your HCP Terraform logs, Datadog populates the out-of-the-box HCP Terraform overview dashboard with insights into security-related events from your HCP Terraform values, items, and users. Widgets include toplists showing the most frequent and infrequent events, and a geolocation map that shows you the country of origin for sign-in attempts.

To find HCP Terraform logs, search your Datadog logs with source:hcp-terraform. If you installed the integration correctly, you should be able to see HCP Terraform events.

Setup

Installation

Step 1: Create an Organization token for HCP Terraform

1. Log in to your Hashicorp account at https://app.terraform.io/ then click your Organization and click Settings
2. Select the API tokens link under Security.
3. Select Create an organization token.
4. Set an expiration date if desired.
5. Click Generate token
6. Copy and save your generated Organization token

Step 2: Create the Datadog Integration

1. Paste the Token into the Organization Token field below.
2. Enter a name for the account.

Configuration

If you are not receiving any logs data, confirm that you have the audit-logging attribute set to true in your organization entitlement set.

Validation

Once the integration is installed, your HCP Terraform audit logs will be available for query with in Datadog logs using source:hcp-terraform.

Data Collected

Metrics

hcp-terraform does not include any metrics.

Service Checks

hcp-terraform does not include any service checks.

Events

hcp-terraform does not include any events.

Troubleshooting

Need help? Contact Datadog support.