Gather trace context for an audit investigation
Search for the request flows that answer your investigation question and bring a concise summary back to your review.
Trigger
Webhook received
Notis starts this workflow when an external tool or custom backend sends an HTTP request.
Action
Search Traces
Search for traces in datadog apm. this action allows you to search for distributed traces across your services. it's essential for: - finding specific request flows during incident investigation - analyzing performance bottlenecks across services - understanding error propagation through your system - correlating user requests with backend operations traces provide the complete picture of a request as it travels through your distributed system, making them crucial for root cause analysis.
Why this helps
Investigation context is slower to assemble when trace searches require repeated tool switching and manual filtering.
- Search traces around a stated investigation question.
- Use a defined service and time window.
- Summarize request-flow context for follow-up.
Setup
Build it in a few focused steps.
- 1Connect 21risk and Datadog once in the Notis portal.
- 2Create an automation in Automations, New Automation, and name the trace investigation.
- 3Describe in one instruction the service, time window, and trace criteria to search.
- 4Choose a webhook trigger and where run reports should go.
- 5Test with one real investigation example and review the matching traces.
Questions about this workflow
Can this search without a service or time window?
It may be possible with other search criteria, but provide enough context to make the search useful and bounded.
Will it conclude root cause?
It can summarize returned trace evidence, but the result should be treated as investigation context rather than a definitive cause.
When this happens · Trigger
Do this · Action
Supported Triggers and Actions
Notis builds workflows that link 21risk to Datadog. A trigger fires from one place; an action lands in another.
21risk triggers
Datadog actions
Recurring trigger
Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.
Create Dashboard
Create a dashboard in datadog. dashboards provide customizable visualizations for monitoring your infrastructure, applications, and business metrics in a unified view.
Webhook trigger
Notis starts this workflow when an external tool or custom backend sends an HTTP request.
Create downtime
Creates a new downtime in datadog to suppress alerts during maintenance windows or planned outages. useful for preventing false alarms during deployments or maintenance.
Create event
Creates a new event in datadog. events are useful for tracking deployments, outages, configuration changes, and other important occurrences.
Create monitor
Creates a new datadog monitor to track metrics, logs, or other data sources with configurable alerting thresholds and notifications.
Create SLO
Create a service level objective (slo) in datadog. slos help you define and track reliability targets for your services, enabling data-driven decisions about service quality and reliability investments.
Create Synthetic API Test
Create a synthetic api test in datadog. creates a new synthetic api test that continuously monitors api endpoints from multiple locations worldwide. useful for proactive monitoring of api uptime, performance, and functionality.
Create Webhook
Create a webhook in datadog. webhooks enable you to receive notifications from datadog monitors and alerts to external services and applications.
Delete Dashboard
Delete a dashboard in datadog. permanently removes a dashboard from your organization. this action cannot be undone. use with caution.
Connect any two apps with Notis in the middle.
21risk and Datadog, or any other combination from 1,000+ integrations.
When this happens · Trigger
Do this · Action
Save your first hour today.
7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Datadog.