Bring IP enrichment into a Datadog log investigation
Start with an IP and its request context, then gather relevant logs in one Notis run.
Trigger
Webhook received
Notis starts this workflow when an external tool or custom backend sends an HTTP request.
Action
Search logs
Searches logs for troubleshooting and analysis.
Why this helps
Investigating suspicious or unexpected IP activity can mean switching between enrichment results and log search.
- Add Abstract enrichment context to a Datadog log investigation.
- Search logs without manually copying details between tools.
- Keep the search bounded by the query details supplied in the request.
Setup
Build it in a few focused steps.
- 1Connect Abstract and Datadog once in the Notis portal.
- 2Create an automation in Automations, New Automation, and name it for the investigation.
- 3Tell Notis to enrich the submitted IP with Abstract and search Datadog logs using the IP and relevant returned context, within the time range supplied.
- 4Pick the webhook trigger and choose where run reports should go.
- 5Test with one real example and review the returned logs.
Questions about this workflow
Does Abstract provide the log time range?
No. Include a time range in the request or automation instruction so the search is scoped appropriately.
Can the workflow search every log automatically?
The Datadog search uses the query context available to the automation. Provide enough detail to focus the investigation.
What happens if enrichment returns no useful detail?
The prompt can still search with the submitted IP and available request context, and report that enrichment did not add usable context.
When this happens · Trigger
Do this · Action
Supported Triggers and Actions
Notis builds workflows that link Abstract to Datadog. A trigger fires from one place; an action lands in another.
Abstract triggers
Datadog actions
Recurring trigger
Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.
Create Dashboard
Creates a dashboard for viewing infrastructure, application, or business metrics.
Webhook trigger
Notis starts this workflow when an external tool or custom backend sends an HTTP request.
Aggregate logs
Create downtime
Creates downtime to silence alerts during maintenance or planned outages.
Create event
Creates an event to record an important occurrence, such as a deployment or outage.
Create monitor
Creates a monitor to track data and trigger alerts.
Create On-Call escalation policy
Create SLO
Creates a service level objective to track service reliability targets.
Create Synthetic API Test
Creates a synthetic API test to monitor API availability and performance from multiple locations.
Connect any two apps with Notis in the middle.
Abstract and Datadog, or any other combination from 1,000+ integrations.
When this happens · Trigger
Do this · Action
Save your first hour today.
7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Datadog.