# Datadog Integration

Datadog is a cloud monitoring and security platform used to track infrastructure health, incidents, and user access.

By integrating Datadog with Sprinto, you can:

* Automate infrastructure monitoring checks
* Sync and validate incident tickets
* Monitor and review user access
* Maintain continuous compliance evidence

Sprinto supports three use cases under Datadog:

* Infrastructure Monitoring
* Incident Management
* Access Review

#### Sprinto checks for Datadog <a href="#sprinto-checks-for-datadog" id="sprinto-checks-for-datadog"></a>

Below are the Sprinto checks for the following integration types:&#x20;

* Infrastructure monitoring: Sprinto checks for infrastructure monitoring

<table><thead><tr><th width="199.10546875">Sprinto check</th><th>Required action</th></tr></thead><tbody><tr><td>Infrastucture is monitored using Datadog</td><td><strong>How to fix</strong>: To pass the following check, ensure that your Datadog account is configured for Infrastructure monitoring on your Sprinto account.</td></tr></tbody></table>

* Incident management: Sprinto checks for incident management

<table><thead><tr><th width="158.21875">Sprinto check</th><th>Required action</th></tr></thead><tbody><tr><td>Reported incident should be closed in Datadog</td><td>The following check gets activated when you have an incident ticket in the open status on your integrated Datadog account.<br><br><strong>How to fix</strong>: To resolve this check, you need to resolve the incident and close the assigned ticket from your Datadog account, then action the incident ticket on Sprinto (Security Hub > Incident > Datadog). For detailed instructions, refer to <a href="https://sprinto.freshdesk.com/a/solutions/articles/72000603003">resolving the incident ticket on Sprinto</a>.</td></tr></tbody></table>

* Access management: Sprinto checks for users' access monitoring

| Sprinto check                                        | Reference procedure                                                                                                                                                                                                                                                                  |
| ---------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
| Datadog access should be removed for offboarded user | [How to fix](https://sprinto.freshdesk.com/support/solutions/articles/72000603858-revoking-critical-system-access-for-off-boarded-staff)                                                                                                                                             |
| User should be identified                            | [How to fix](https://sprinto.freshdesk.com/support/solutions/articles/72000606019)                                                                                                                                                                                                   |
| User access to critical system should be valid       | <p><a href="https://sprinto.freshdesk.com/support/solutions/articles/72000606015-how-to-define-critical-system-user-access-mcas-on-sprinto-">How to fix</a> </p><p>Note: The user access to the critical system becomes valid if the respective Org role is added to the system.</p> |

## Prerequisites

Before connecting Datadog to Sprinto, ensure that:

* You have **Admin access** to your Datadog account.
* You can create:
  * API Keys
  * Application Keys
* You know your **Datadog region** (for example: US1-East, US3-West, EU1-Europe, AP1-Japan, etc.).

Sprinto requires read-only access to monitors, incidents, and user access data.

***

## Permissions Required (Infrastructure Monitoring & Incident Management)

When creating the Application Key in Datadog, ensure the following scopes are enabled:

* `monitors_read`
* `user_access_read`
* `incident_read`

Sprinto uses this access only to fetch data. No configuration changes are made in Datadog.

***

## How It Works

The Datadog integration consists of two connection flows:

1. Infrastructure Monitoring & Incident Management
2. Access Review

Both are configured separately from the Integrations page.

***

## Connect Datadog for Infrastructure Monitoring & Incident Management

### Step 1: Navigate to Integrations

1. Log in to the Sprinto dashboard.
2. Go to **Settings → Integrations**.
3. Under the **All** tab, search for **Datadog**.
4. Click **Connect** next to Datadog.

<figure><img src="https://3220032727-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FEsyn5VMU6e0OyGjRtKgx%2Fuploads%2Fy86I6KDHWGwwHjcHZef3%2FScreenshot%202026-03-02%20at%2014.39.31.png?alt=media&#x26;token=782dcb9c-9e94-4970-9f56-f8802dcfa9bc" alt="" width="563"><figcaption></figcaption></figure>

A drawer opens showing two options:

* Datadog – Infrastructure Monitoring & Incident Management
* Datadog – Access Review

Click **Connect** next to **Infrastructure Monitoring & Incident Management**.

<figure><img src="https://3220032727-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FEsyn5VMU6e0OyGjRtKgx%2Fuploads%2FznXAqCO2NB1idcpDbdT2%2FScreenshot%202026-03-02%20at%2014.40.20.png?alt=media&#x26;token=582e1302-e3b6-4420-8397-7b23d36020d9" alt="" width="375"><figcaption></figcaption></figure>

***

### Step 2: Review Permissions and Data

In the drawer:

* Review the number of controls and checks automated.
* Expand **Permission & Data** to review:
  * Permissions required
  * Data used by Sprinto

Click **Next**.

<figure><img src="https://3220032727-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FEsyn5VMU6e0OyGjRtKgx%2Fuploads%2FF8rOCBqhJKbBQk4I66ZE%2FScreenshot%202026-03-02%20at%2014.42.25.png?alt=media&#x26;token=5b10cdb7-8d2e-40b5-ba8c-1ff61e26b52b" alt="" width="375"><figcaption></figcaption></figure>

***

### Step 3: Review Prerequisites and Generate Keys

You will see:

* Connection type: API Key
* Prerequisites
* Instructions to generate:
  * API Key
  * Application Key

#### Create an API Key

1. Log in to Datadog.
2. Go to **Organization Settings**.
3. Navigate to **API Keys**.
4. Click **New Key**.

<figure><img src="https://3220032727-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FEsyn5VMU6e0OyGjRtKgx%2Fuploads%2FPuL7uRJJEiKXmVApBhd6%2FScreenshot%202026-02-26%20at%205.06.07%E2%80%AFPM.png?alt=media&#x26;token=0457bf67-f1db-41c0-900d-ccbe59e6bc66" alt="" width="563"><figcaption></figcaption></figure>

5. Enter a name (for example, *Sprinto Access*).
6. Click **Create Key**.

<figure><img src="https://3220032727-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FEsyn5VMU6e0OyGjRtKgx%2Fuploads%2FU1A8RckrwNhtf5otDZ8B%2FScreenshot%202026-02-26%20at%205.06.49%E2%80%AFPM.png?alt=media&#x26;token=b16e80d4-a235-4b33-b4c2-e7a6e862ded0" alt="" width="563"><figcaption></figcaption></figure>

7. Copy and securely store the API key.

#### Create an Application Key

1. Go to **Application Keys**.
2. Click **New Key**.

<figure><img src="https://3220032727-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FEsyn5VMU6e0OyGjRtKgx%2Fuploads%2FfXnkcNRY15tj1aLDsE4R%2FScreenshot%202026-02-26%20at%205.07.51%E2%80%AFPM.png?alt=media&#x26;token=3b71c7cf-c206-4271-a39c-73eab1f4501e" alt="" width="563"><figcaption></figcaption></figure>

3. Enter a name.
4. Click **Create Key**.
5. Click **Edit** next to Scopes and enable the following scopes:
   * `monitors_read`
   * `user_access_read`
   * `incident_read`
6. Click **Save** to save changes.
7. Copy and securely store the Application Key.
8. Click **Finish**.

<figure><img src="https://3220032727-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FEsyn5VMU6e0OyGjRtKgx%2Fuploads%2FEwqXkSoew9e69bNysblK%2FScreenshot%202026-02-26%20at%205.12.34%E2%80%AFPM.png?alt=media&#x26;token=e5af7f25-2d1a-4142-a219-1aa870c4021c" alt="" width="563"><figcaption></figcaption></figure>

After generating both keys, return to the Sprinto dashboard:

* Select the checkbox confirming you have the credentials.
* Click **Connect Datadog**.

<figure><img src="https://3220032727-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FEsyn5VMU6e0OyGjRtKgx%2Fuploads%2FppmTHZZ8lY1iGgTbpBj5%2FScreenshot%202026-03-02%20at%2014.56.07.png?alt=media&#x26;token=4f047734-e30c-422d-a8d6-8e4fa4476d14" alt="" width="375"><figcaption></figcaption></figure>

***

### Step 4: Enter Credentials in Sprinto

In the final drawer:

1. Enter:
   * API Key
   * Application Key
2. Select your **Region** from the dropdown (for example: US1-East, EU1-Europe, AP1-Japan and so on). Know more about [how Datadog regions work](https://docs.datadoghq.com/getting_started/site/#access-the-datadog-site).
3. Click **Connect Datadog**.

<figure><img src="https://3220032727-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FEsyn5VMU6e0OyGjRtKgx%2Fuploads%2FUbsbF9ihF08W9z6mGzVW%2FScreenshot%202026-03-02%20at%2014.56.39.png?alt=media&#x26;token=7863dea1-4dcb-4f23-af8b-8c7d9c5068f1" alt="" width="375"><figcaption></figcaption></figure>

Once validated, the integration becomes active.

***

## Post-Connection Configuration

After connecting:

#### Configure Infrastructure Monitoring

1. Go to **Data Library → Infrastructure → Infra Systems**.
2. Click **Add infra system**.

<figure><img src="https://3220032727-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FEsyn5VMU6e0OyGjRtKgx%2Fuploads%2Ff7f17aKU3q3PSX81d3g4%2FScreenshot%202026-03-02%20at%2015.09.09.png?alt=media&#x26;token=567cbf42-ca22-4414-b59b-839cd6c1af2a" alt="" width="563"><figcaption></figcaption></figure>

3. Select **Datadog** as the monitoring provider.
4. Save changes.

Sprinto will validate that monitoring is active and properly configured.

***

#### Configure Incident Management

1. Navigate to **Data Library → Incidents → Overview**.
2. Click **+ Add System**.

<figure><img src="https://3220032727-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FEsyn5VMU6e0OyGjRtKgx%2Fuploads%2FMAs9wmjg9UW0d6wLDgmM%2FScreenshot%202026-03-02%20at%2015.11.03.png?alt=media&#x26;token=4340c1ed-f2fd-423a-9e34-2f0973c7d828" alt="" width="563"><figcaption></figcaption></figure>

3. Select **Datadog**.
4. Choose the date from which incidents should sync.

Sprinto will:

* Track open incidents
* Validate resolution timelines
* Trigger checks if SLAs are breached

***

## Connect Datadog for Access Review

The Access Review integration uses an API key–based connection powered by Truto.

***

### Step 1: Start the Access Review Connection

1. Log in to the Sprinto dashboard.
2. Go to **Settings → Integrations**.
3. Under the **All** tab, search for **Datadog**.
4. Click **Connect** next to Datadog.

<figure><img src="https://3220032727-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FEsyn5VMU6e0OyGjRtKgx%2Fuploads%2Fy86I6KDHWGwwHjcHZef3%2FScreenshot%202026-03-02%20at%2014.39.31.png?alt=media&#x26;token=782dcb9c-9e94-4970-9f56-f8802dcfa9bc" alt="" width="563"><figcaption></figcaption></figure>

5. In the drawer, click **Connect** next to **Datadog – Access Review**.

***

### Step 2: Review Permissions and Data

A drawer opens displaying:

* Number of controls and checks automated
* Permissions required
* Data used by Sprinto
* Access type requirement (Admin access required)

Review the information and click **Next**.

<figure><img src="https://3220032727-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FEsyn5VMU6e0OyGjRtKgx%2Fuploads%2F3ZnOzWfsfe8KC6dG181u%2Fdata1.png?alt=media&#x26;token=e27713f8-480c-4416-892b-6586e3ac4f14" alt="" width="317"><figcaption></figcaption></figure>

***

### Step 3: Setup Datadog Integration

You will now see the **Setup Datadog Integration** screen.

The screen confirms:

* The integration can be performed from **Settings** or **Access → Overview**
* Admin access is required

To proceed:

1. Select the checkbox:\
   **I have admin access to my Datadog account**
2. Click **Connect to Datadog.**

<figure><img src="https://3220032727-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FEsyn5VMU6e0OyGjRtKgx%2Fuploads%2FjrkGZGCGHwEbnnIyPWqT%2Fdata2.png?alt=media&#x26;token=92562926-b508-4cd0-820f-fc89dac98c36" alt="" width="317"><figcaption></figcaption></figure>

***

### Step 4: Connect Using API Key

A new modal opens titled **Connect using API Key**.

You must provide:

* **Datadog Region**
* **API Key**
* **Application Key**

#### Select Region

Choose your Datadog region from the dropdown (for example: US1, EU1, US3, etc.).

Know more about [how Datadog regions work](https://docs.datadoghq.com/getting_started/site/#access-the-datadog-site).

You can identify your region from your Datadog URL.\
Example:\
`https://app.datadoghq.com` → US1

<figure><img src="https://3220032727-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FEsyn5VMU6e0OyGjRtKgx%2Fuploads%2F1hfz0yX7UBW51XaKOMXW%2Fdata3.png?alt=media&#x26;token=c96afffe-4cf3-43fb-9f9e-8480179e98cd" alt=""><figcaption></figcaption></figure>

***

#### Generate API Key in Datadog

1. Log in to Datadog.
2. Go to **Organization Settings**.
3. Navigate to **API Keys**.
4. Click **New Key**.

<figure><img src="https://3220032727-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FEsyn5VMU6e0OyGjRtKgx%2Fuploads%2FPuL7uRJJEiKXmVApBhd6%2FScreenshot%202026-02-26%20at%205.06.07%E2%80%AFPM.png?alt=media&#x26;token=0457bf67-f1db-41c0-900d-ccbe59e6bc66" alt="" width="563"><figcaption></figcaption></figure>

5. Name the key (for example: Sprinto Access).
6. Click **Create Key**.
7. Copy and securely store the API Key.

<figure><img src="https://3220032727-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FEsyn5VMU6e0OyGjRtKgx%2Fuploads%2FU1A8RckrwNhtf5otDZ8B%2FScreenshot%202026-02-26%20at%205.06.49%E2%80%AFPM.png?alt=media&#x26;token=b16e80d4-a235-4b33-b4c2-e7a6e862ded0" alt="" width="563"><figcaption></figcaption></figure>

***

#### Generate Application Key in Datadog

1. Navigate to **Application Keys**.
2. Click **New Key**.
3. Name the key.
4. Click **Create**.
5. Edit the key and enable the required scopes:
   * `user_access_read`
6. Save the configuration.
7. Copy the Application Key.

***

### Step 5: Complete the Connection

1. Enter:
   * Datadog Region
   * API Key
   * Application Key
2. Click **Connect.**

Once validated:

* The Access Review integration becomes active.
* Datadog can now be added as a Critical System.

***

## Add Datadog as a Critical System

After successful connection:

1. Go to **Data Library → Access → Critical systems.**
2. Click **Add critical systems.**
3. Search for **Datadog.**
4. Select **Datadog.**
5. Click **Add 1 System.**

<figure><img src="https://3220032727-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FEsyn5VMU6e0OyGjRtKgx%2Fuploads%2FSS6b54bPAZmwVsDRaCvi%2FScreenshot%202026-03-02%20at%2015.52.36.png?alt=media&#x26;token=b1ddecac-6d6c-48a0-a76d-ce2bc9f84fa5" alt="" width="563"><figcaption></figcaption></figure>

Datadog will now appear under Critical Systems for access monitoring.

***

## Configure Access Monitoring

1. Open Datadog from the Critical Systems list.
2. Click **Configure**.
3. Define valid access criteria:
   * Role-based access
   * Approved access requests
   * Allowed user groups

Sprinto monitors user access against the defined rules but does not automatically revoke access.

***

## What Sprinto Monitors

<table><thead><tr><th width="230.4453125">Use Case</th><th width="366.453125">Validation Performed</th></tr></thead><tbody><tr><td>Infrastructure Monitoring</td><td>Ensures Datadog monitors are active</td></tr><tr><td>Incident Management</td><td>Ensures incidents are tracked and closed</td></tr><tr><td>Access Review</td><td>Ensures user access is valid and reviewed</td></tr></tbody></table>

***

## Sync Behaviour

* Initial sync may take up to 24 hours.
* Integration status shows as **Active** once connected.
* Checks begin running automatically based on configuration.

***

## Troubleshooting

#### Invalid API Key

* Confirm the key is active.
* Ensure the correct region is selected.

#### Data Not Syncing

* Verify required scopes are enabled.
* Confirm integration status is Active.

#### Access Review Not Triggering

* Ensure Datadog is added as a Critical System.
* Confirm access rules are configured.

***

## What Sprinto Validates for Access Review

Sprinto checks:

* Only authorised users have access to Datadog
* Offboarded users do not retain access
* Access reviews are completed as per policy

Please contact [Sprinto Support](mailto:www.support@sprinto.com) if you have any queries related to the integration or need assistance.