Review abuse related log trends without raw log exports
Use scheduled log aggregation to surface counts and patterns for indicators you provide from Abuselpdb.
Trigger
Recurring schedule
Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.
Action
Aggregate logs
Aggregates logs into counts, statistics, groupings or trends without downloading raw events.
Why this helps
Checking raw logs for each known indicator takes time and makes recurring reviews harder to compare.
- Review counts and grouped breakdowns without downloading raw events.
- Use a repeatable schedule for indicator-based log reviews.
- Spend less time scanning individual log messages.
Setup
Build it in a few focused steps.
- 1Connect Abuselpdb and Datadog once in the Notis portal.
- 2Create an automation in Automations, or tell Notis in plain language from any channel.
- 3In one instruction, specify the indicators, log query, aggregation or grouping, and time window to review.
- 4Choose the recurring schedule trigger and where run reports should go.
- 5Test with one real indicator and confirm the summary reflects available log data.
Questions about this workflow
Does this retrieve individual log messages?
The aggregate logs action is for counts, unique values, percentiles, numeric statistics, grouped breakdowns, and values over time. Use the log search action only when individual messages are required; that action is not in this package's allowed list.
Can Notis infer missing IP history?
No. The IP indicators and any comparison baseline must be supplied or available in the connected data. The workflow can only summarize returned Datadog logs.
When this happens · Trigger
Do this · Action
Supported Triggers and Actions
Notis builds workflows that link Abuselpdb to Datadog. A trigger fires from one place; an action lands in another.
Abuselpdb triggers
Datadog actions
Recurring trigger
Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.
Create Dashboard
Creates a dashboard for viewing infrastructure, application, or business metrics.
Webhook trigger
Notis starts this workflow when an external tool or custom backend sends an HTTP request.
Aggregate logs
Aggregates logs into counts, statistics, groupings or trends without downloading raw events.
Create downtime
Creates downtime to silence alerts during maintenance or planned outages.
Create event
Creates an event to record an important occurrence, such as a deployment or outage.
Create monitor
Creates a monitor to track data and trigger alerts.
Create On-Call escalation policy
Creates an on-call escalation policy.
Create SLO
Creates a service level objective to track service reliability targets.
Create Synthetic API Test
Creates a synthetic API test to monitor API availability and performance from multiple locations.
Connect any two apps with Notis in the middle.
Abuselpdb and Datadog, or any other combination from 1,000+ integrations.
When this happens · Trigger
Do this · Action
Save your first hour today.
7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Datadog.