What you’ll need
- A Datadog account with permission to create API and application keys.
- Two minutes.
Set it up
Create an API key
In Datadog, go to Organization Settings → API Keys and click New Key. Name it
Axiom Layer and copy the key value.Create an application key
Go to Organization Settings → Application Keys and click New Key. Name it
Axiom Layer and copy the key value.Paste both keys into Layer
In Layer, go to Integrations, find Datadog, and click Connect. Paste the API Key and Application Key, then click Connect.
If your Datadog account uses a regional site (for example
api.datadoghq.eu or api.us5.datadoghq.com), enter the site hostname in the Site field. Leave it blank for the default US1 site.What gets synced
| Object | Fields | Refresh cadence |
|---|---|---|
| Monitors | name, type, status, tags | Daily |
| Downtimes | scope, start/end, active status | Daily |
| Log indexes | name, retention days, daily limit | Daily |
Compliance evidence
Datadog data generates evidence records for the following SOC 2 controls:| Evidence | Controls |
|---|---|
| Monitor uptime and SLA posture | CC7.2, A1.2 |
| Downtime and alert policy inventory | CC7.2, CC7.3 |
| Log index retention settings | CC7.2, CC6.1 |
Required permissions
The API key authenticates requests to Datadog’s API. The application key determines the scope of data your requests can access — it inherits the permissions of the Datadog user who created it. A user with the Datadog Read Only role is sufficient.Troubleshooting
403 Forbidden on first sync
403 Forbidden on first sync
The application key may belong to a user without read permissions. Create the application key from a user account that has at least the Datadog Read Only role.
No monitors or log indexes appear
No monitors or log indexes appear
Verify that your Datadog account has monitors configured and that the API key belongs to the correct organization. If you have multiple Datadog organizations, make sure you’re generating keys in the right one.
I use a non-US Datadog site
I use a non-US Datadog site
Enter your regional site hostname (for example
api.datadoghq.eu) when connecting. If you connected without specifying a site, disconnect and reconnect with the correct hostname.