Datadog | cside docs

Availability

Datadog is available on Enterprise for teams where cside has enabled the integration. If it is not visible under Team Settings > Integrations, contact cside to check your team’s access.

Sending cside data to Datadog

Supported alert events and alert-count metrics; Enterprise and team enablement required.

Prerequisites

Before adding Datadog as a destination, connect your Datadog account as a team integration:

Open the dashboard and navigate to Team Settings
Select the Integrations tab
Click Connect next to Datadog
Choose the Datadog site your organization uses, then authorize cside

Supported sites:

Site	Domain
US1	`datadoghq.com`
US3	`us3.datadoghq.com`
US5	`us5.datadoghq.com`
EU1	`datadoghq.eu`
AP1	`ap1.datadoghq.com`
AP2	`ap2.datadoghq.com`
US1-FED	`ddog-gov.com`

Pick the right site

Data is sent to the site you authorize. If you pick the wrong one, disconnect the integration and reconnect with the correct site.

Adding a Datadog destination

Open the dashboard and navigate to Team Settings > Notifications
Create a new notification config or edit an existing one
Under Send To, click Add destination and select Datadog
In the Configuration panel:
- Tags (optional): comma-separated tags added to everything cside sends, for example env:production, service:checkout
- Priority: Normal or Low, used as the event priority in Datadog
Click Save or Save & Test

Events

Supported real-time alerts are sent as Datadog events with source cside-integration, alert details, and a link to cside. Delivery can group alerts by destination and domain. The table below lists supported triggers. Script Blocked by CSP digests and PCI Report Available notifications are not delivered to Datadog.

Security Headers Changed, PCI Vendor Review Reminder, and the other scheduled digests are also unsupported as Datadog deliveries. For Vulnerable Script Detected, select the immediate schedule.

Trigger	Alert type
Vulnerable Script Detected	`error`
High-Risk Vulnerability Detected	`error`
Script Threat Detected	`warning`
Managed List: Flagged	`warning`
Malicious Tag Manager	`warning`
Malicious Outbound Connection	`warning`

Metrics

Dashboards and monitors are built from metrics rather than events, so cside also submits time series to Datadog.

Alert metrics

For each alert handled for a Datadog destination, cside submits a count point of 1 to cside.alerts.count. Metrics and events are submitted independently, so event delivery alone does not confirm metric delivery.

Metric	Type	Description
`cside.alerts.count`	Count	One count point per alert submitted for this destination

Tags: integration:cside, domain, trigger_type, alert_type, plus any tags you configured on the destination.

Building a dashboard

Graph cside.alerts.count by domain, trigger_type, or alert_type to review alert volume. Destination tags can separate environments or services. Use a supported real-time trigger when selecting Save & Test, then check both the event and metric in Datadog.

Testing

Click Save & Test when creating or editing a notification config to send a test notification to Datadog. Test events are clearly marked in their body so your team knows no action is required.

Removing a Datadog destination

To remove Datadog from a notification config, edit the config under Team Settings > Notifications and remove the Datadog destination from the Send To list.

To disconnect the integration entirely, go to Team Settings > Integrations and click Disconnect next to Datadog. Historical events and metrics already in Datadog are not deleted.