Watch Datadog logs for reported IPs
When an IP is flagged, turn that signal into a Datadog monitor based on your chosen log query and alert threshold.
Trigger
Webhook received
Notis starts this workflow when an external tool or custom backend sends an HTTP request.
Action
Create monitor
Creates a monitor to track data and trigger alerts.
Why this helps
A suspicious IP can be identified without a reliable way to notice its later activity in application logs.
- Create a focused alert after an IP reputation check.
- Use your own log query and threshold for the environment.
- Reduce the need to manually revisit flagged IPs.
Setup
Build it in a few focused steps.
- 1Connect Abuselpdb and Datadog once in the Notis portal.
- 2Create an automation in Automations, or tell Notis in plain language from any channel.
- 3In one instruction, ask Notis to create a Datadog monitor for logs matching the reported IP, using the log query and threshold you provide.
- 4Choose the webhook trigger and where run reports should go.
- 5Test with one real IP check and confirm the monitor configuration.
Questions about this workflow
Does Abuselpdb provide the Datadog log query?
No query is specified by the app descriptions. Provide the query and the alert threshold in your instruction so the monitor can be configured for your logs.
Will this monitor block the IP?
No. The listed Datadog action creates a monitor. It does not block network traffic or change firewall rules.
When this happens · Trigger
Do this · Action
Supported Triggers and Actions
Notis builds workflows that link Abuselpdb to Datadog. A trigger fires from one place; an action lands in another.
Abuselpdb triggers
Datadog actions
Recurring trigger
Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.
Create Dashboard
Creates a dashboard for viewing infrastructure, application, or business metrics.
Webhook trigger
Notis starts this workflow when an external tool or custom backend sends an HTTP request.
Aggregate logs
Aggregates logs into counts, statistics, groupings or trends without downloading raw events.
Create downtime
Creates downtime to silence alerts during maintenance or planned outages.
Create event
Creates an event to record an important occurrence, such as a deployment or outage.
Create monitor
Creates a monitor to track data and trigger alerts.
Create On-Call escalation policy
Creates an on-call escalation policy.
Create SLO
Creates a service level objective to track service reliability targets.
Create Synthetic API Test
Creates a synthetic API test to monitor API availability and performance from multiple locations.
Connect any two apps with Notis in the middle.
Abuselpdb and Datadog, or any other combination from 1,000+ integrations.
When this happens · Trigger
Do this · Action
Save your first hour today.
7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Datadog.