Datadog integration overview

Overview

Datadog is a monitoring and analytics platform that provides infrastructure monitoring, application performance monitoring, log management, and security monitoring for cloud-scale applications. Persona’s Datadog integration lets you send workflow-generated log events to Datadog so teams can monitor identity operations alongside the rest of their production telemetry.

This integration is especially helpful for fraud, risk, compliance, and platform operations teams that want centralized visibility into workflow outcomes (for example: escalations, manual review decisions, or high-risk signals) and the ability to build dashboards and alerts in Datadog.

Benefits

Centralized Observability: Send Persona workflow logs into Datadog so your identity operations can be monitored in the same place as infrastructure, application, and security signals.

Faster Detection & Response: Use Datadog’s log search, dashboards, and alerting to spot spikes in failures, unusual patterns, or operational bottlenecks sooner.

Better Operational Context: Add consistent tags, sources, services, and statuses to logs so teams can filter, route, and correlate identity events during investigations.

Integration Features

Persona’s Datadog integration supports sending workflow-generated logs to Datadog over HTTP. Key capabilities include:

  • Send logs from workflows: Send one or more log entries to Datadog as part of a Persona Workflow Action step.
  • Batch log delivery: Send multiple log entries in a single action (up to 1,000 entries per request).
  • Flexible metadata: Attach tags and attributes like source, service, hostname, and status to improve filtering and downstream alerting.
  • Multi-site support: Send logs to multiple Datadog sites (US1, EU, US3, US5, AP1, AP2, and US1-FED).

Setting up the Datadog integration

Prerequisites

To set up the Datadog integration, ensure you have:

  • Admin access to your Datadog account
  • Necessary API permissions to access Datadog credentials

Setting up the Datadog credentials

  1. In the Persona Dashboard, navigate to Integrations > Marketplace and click on Datadog.
  2. Click on Add Credential at the top of the page.
  3. Enter a Nickname for Credential to help identify this connection.
  4. Provide your Datadog API key (used to authorize log intake requests).
  5. Select the Datadog site/region that matches where your Datadog organization is hosted.
  6. Click Continue to save your credential.

Using the Datadog integration in a workflow

  1. Create a new workflow, or open an existing workflow you’d like to update.
  2. Add a new action step > Integrations.
  3. Select the Datadog integration and choose your Datadog credential.
  4. Configure the input fields to pass in the correct information.
  5. Save/publish the workflow.

Datadog Operations Overview

In addition to syncing field values, Persona can send logs to Datadog, attach tags for filtering, and set service/source metadata using Datadog’s API. These actions support seamless two-way workflows, letting teams manage investigations without switching platforms.

See below for a comprehensive list of available Workflow Action steps and possible configurations for the Datadog integration:

Send Logs Workflow Action Step

Sends one or more log entries from Persona to Datadog, so you can monitor workflow activity in Datadog’s Log Explorer and build dashboards or alerts around identity operations. Logs can be sent in batches, which is useful when a single workflow step needs to emit multiple related events (for example, one log per check result).

Datadog enforces payload limits—such as a maximum of 5MB (uncompressed) per request and up to 1,000 log entries per request—so it’s important to keep messages concise and use tags for structure.

Configuration Steps:

  • Provide values for required fields:
    • Log entries (a list of logs)
    • Message (required for each log entry)
  • Optionally add:
    • Tags (comma-separated key:value pairs)
    • Source (the originating technology/integration name)
    • Service (application or service name used for correlation)
    • Hostname (originating host name)
    • Status (for example: info, warning, error)

FAQs

Which Datadog sites/regions are supported?

The integration supports Datadog log intake endpoints for US1 (default), EU, US3, US5, AP1, AP2, and US1-FED (GovCloud).

Can I send multiple logs at once?

Yes. The Datadog log intake operation accepts a batch of log entries in one step (up to 1,000 entries per request).

What information is required vs. optional when sending logs?

Each log entry requires a message. You can optionally include metadata such as tags, source, service, hostname, and status to make logs easier to search, filter, and alert on in Datadog.