Skip to content
Notis

Query Datadog metrics after a 1Password event

Validate the operational effect of a credential change while the context is still fresh.

Trigger

Webhook received

Notis starts this workflow when an external tool or custom backend sends an HTTP request.

Action

Query metrics

Queries datadog metrics and returns time series data. useful for retrieving historical metric data, creating custom dashboards, or building reports.

Why this helps

After a vault or credential update, the evidence needed to confirm service health is often in a different tool.

  • Links a security event to measurable service behavior
  • Shortens the time from change to confidence
  • Produces a repeatable validation report

Setup

Build it in a few focused steps.

  • 1Connect 1Password and Datadog in Notis once.
  • 2Create an automation that asks for named metrics and a plain language interpretation.
  • 3Choose notis_webhook as the trigger.
  • 4Select a report channel for the metric result.
  • 5Send one representative webhook and confirm the returned time window and metric scope.

Questions about this workflow

What metric should I query?

Name the metric, service, tags, and time window in the prompt or include them in the webhook payload.

Can this prove a change caused an incident?

It can show correlated metric behavior. Causation still requires the evidence and reasoning you provide.

When this happens · Trigger

Do this · Action

Supported Triggers and Actions

Notis builds workflows that link 1password to Datadog. A trigger fires from one place; an action lands in another.

1password triggers

Datadog actions

Recurring trigger

Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.

TriggerScheduled

Create Dashboard

Create a dashboard in datadog. dashboards provide customizable visualizations for monitoring your infrastructure, applications, and business metrics in a unified view.

ActionInstant

Webhook trigger

Notis starts this workflow when an external tool or custom backend sends an HTTP request.

TriggerInstant

Create downtime

Creates a new downtime in datadog to suppress alerts during maintenance windows or planned outages. useful for preventing false alarms during deployments or maintenance.

ActionInstant

Create event

Creates a new event in datadog. events are useful for tracking deployments, outages, configuration changes, and other important occurrences.

ActionInstant

Create monitor

Creates a new datadog monitor to track metrics, logs, or other data sources with configurable alerting thresholds and notifications.

ActionInstant

Create SLO

Create a service level objective (slo) in datadog. slos help you define and track reliability targets for your services, enabling data-driven decisions about service quality and reliability investments.

ActionInstant

Create Synthetic API Test

Create a synthetic api test in datadog. creates a new synthetic api test that continuously monitors api endpoints from multiple locations worldwide. useful for proactive monitoring of api uptime, performance, and functionality.

ActionInstant

Create Webhook

Create a webhook in datadog. webhooks enable you to receive notifications from datadog monitors and alerts to external services and applications.

ActionInstant

Delete Dashboard

Delete a dashboard in datadog. permanently removes a dashboard from your organization. this action cannot be undone. use with caution.

ActionInstant

Connect any two apps with Notis in the middle.

1password and Datadog, or any other combination from 1,000+ integrations.

When this happens · Trigger

Do this · Action

Save your first hour today.

7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Datadog.