Datadog Integration

Prerequisites

Step 1: Generate API and App Keys

1. In Datadog, go to Organization Settings → API Keys → New Key
2. Name it StackFlow and copy the API Key
3. Go to Organization Settings → Application Keys → New Key
4. Name it StackFlow App Key and copy the Application Key

Step 2: Configure Monitor Webhook

1. In Datadog, go to Integrations → Webhooks → New
2. Set the URL to: https://your-instance.stackflow-tech.com/prod/api/webhooks/inbound/datadog
3. Enable Use custom payload and paste the StackFlow payload template:

{
  "alert_title": "$ALERT_TITLE",
  "alert_type": "$ALERT_TYPE",
  "alert_transition": "$ALERT_TRANSITION",
  "priority": "$PRIORITY",
  "hostname": "$HOSTNAME",
  "tags": "$TAGS",
  "url": "$LINK",
  "monitor_id": "$ALERT_ID",
  "timestamp": "$TIMESTAMP"
}

4. In the Custom Headers section, add: X-StackFlow-Secret: YOUR_WEBHOOK_SECRET
5. Click Save

Step 3: Tag Mapping

Configure how Datadog tags map to StackFlow fields. Tags follow the format key:value:

Step 4: Connect in StackFlow

1. Navigate to Admin → Integration Hub → Datadog → Configure
2. Enter the Datadog API Key and Application Key
3. Enter your Datadog site (e.g., datadoghq.com or datadoghq.eu)
4. Configure tag-to-field mapping
5. Set priority mapping: ALERT→P1, WARNING→P2, NO DATA→P3, INFO→P4
6. Click Save & Test

Monitor to Incident Auto-Creation

When a Datadog monitor fires, StackFlow evaluates configured rules and automatically creates an incident. Deduplication ensures only one incident is created per monitor until it resolves:

# View auto-created incidents from Datadog
curl -H "Authorization: Bearer $TOKEN"   "https://your-instance.stackflow-tech.com/prod/api/incidents?source=datadog&state=new"

Alert Routing Rules

{
  "routing_rules": [
    {
      "condition": "tags.env == 'production' AND alert_type == 'metric alert'",
      "action": "create_incident",
      "assignment_group": "Platform Engineering",
      "priority_override": null
    },
    {
      "condition": "tags.service == 'payments'",
      "action": "create_incident",
      "assignment_group": "Payments SRE",
      "priority_override": "P1",
      "notify_slack_channel": "#incidents-payments"
    },
    {
      "condition": "tags.env != 'production'",
      "action": "ignore"
    }
  ]
}

Field Reference

Testing the Integration

1. In Datadog, trigger a test webhook: Integrations → Webhooks → [your webhook] → Test
2. Verify the StackFlow incident was created in ITSM → Incidents
3. Resolve the Datadog monitor and verify the StackFlow incident moves to resolved

# Manually send a test Datadog-format payload
curl -X POST   https://your-instance.stackflow-tech.com/prod/api/webhooks/inbound/datadog   -H "Content-Type: application/json"   -H "X-StackFlow-Secret: YOUR_SECRET"   -d '{"alert_title":"Test Monitor","alert_type":"metric alert","alert_transition":"Triggered","priority":"P2","hostname":"test-host","tags":"env:production,team:platform"}'

Troubleshooting