# Datadog

> Monitoring and alerting coverage. Prerequisites, setup steps and troubleshooting.

Source: https://docs.csquaregrc.com/connectors/datadog

## What it does

Datadog supplies monitoring and alerting evidence: which monitors exist, whether they are muted, and how incidents were handled. It backs availability and incident-response controls.

## Prerequisites

- A cSquare GRC workspace where you are an **owner** or **admin**.
- Connection method: **API key or token**.
- Access needed at Datadog: Read-only. monitors_read, incident_read and logs_read scopes are enough.

## Set up

Open **Settings > Integrations** in [the app](https://app.csquaregrc.com), find Datadog, then:

1. In Datadog open Organization Settings, then API Keys, and create a key for cSquare.
2. Create an Application Key under the same organization with read scopes.
3. Paste both keys here and choose the Datadog site (for example datadoghq.com or datadoghq.eu).

## Verify the connection

1. Back in **Settings > Integrations**, Datadog should show **Connected** with a recent sync time.
2. Open **Evidence** and filter by source **Datadog**. The first sync can take a few minutes.
3. Open a control that depends on Datadog and confirm the new evidence is linked.

## AI prompts

Paste these into Fibo in the app, or into any assistant connected through [MCP](/mcp/connect).

```text
I just connected Datadog to cSquare GRC. Check that it is syncing, list the evidence it has collected so far, and tell me which controls in my active programs now have evidence from Datadog.
```

```text
Which controls in my programs could be covered by Datadog evidence but still have no current evidence? Group them by framework and suggest what to collect.
```

## Troubleshooting

### 403 Forbidden on every call

The site is wrong. EU and US accounts use different hostnames; pick the site that matches your Datadog URL.

### API key valid but application key rejected

Application keys inherit the scopes of the user who made them. Recreate the key as a user who can read monitors and incidents.

### Test connection fails immediately

Nine times out of ten the credential was pasted with a trailing space, or it was issued in a different tenant or region. Re-copy it and try again.

### The connector is quarantined

Collection paused after three consecutive failures. Fix the credential, then use Re-test and re-enable on the Active connections tab; it only resumes when the test passes.

### Connected, but no evidence appears

Check that at least one collection type is selected and that the account can see the resources. Read-only accounts scoped to a single project will only return that project.

### Still stuck?

```text
My Datadog connector in cSquare GRC is failing. Here is the error I see: <paste error>. Walk me through the likely causes and the exact fix, step by step.
```