# Datadog AI agent for Slack & Microsoft Teams Viktor is an AI employee that connects to Datadog and helps you monitor application errors and incidents, running 13 Datadog actions for you like List Logs, Search Logs, and Search Hosts. Ask in plain English in Slack or Microsoft Teams; Viktor does the work in Datadog and reports back. Viktor connects with a scoped API key. - Tool: Datadog - Category: Cloud & Data - Connection: API key - Actions available: 13 - Works from: Slack and Microsoft Teams - Page: https://viktor.com/integrations/datadog ## What can you ask Viktor to do in Datadog? - "Summarize the new errors in Datadog from the last 24 hours and flag any regressions." - "Check Datadog for the root cause of last night's incident and report back." - "Watch Datadog for a new critical alert and page me immediately." - "Post a summary of this week's Datadog incident count to #eng every Friday." ## What can Viktor do in Datadog? (13 actions) - **Search Services** - List services from Datadog's Service Catalog with ownership, metadata, and team info. Use to discover service names for filtering in Search Logs (service:my-app) or finding monitors via Search Monitors (tag:service:my-app). Returns service definitions including links, docs, and on-call. - **Search Monitors** - Search Datadog monitors (alerting rules) including status, thresholds, and conditions. Query syntax: tag:env:production, type:metric, status:Alert. Tags filter: comma-separated (e.g. env:prod,team:backend). After finding a monitor, use Search Events to see recent state changes, or Get Metric Data to query the underlying metric it tracks. Returns monitor ID, name, type, query, status, and tags. - **Search Metrics** - Discovery tool: list available Datadog metric names, optionally filtered by host. Returns metric name strings (e.g. system.cpu.user, aws.ec2.cpuutilization) for use in Get Metric Data queries with the syntax aggregation:metric.name{tags}. Use Search Hosts to find valid host names for the host filter. - **Search Logs** - Search Datadog logs matching a query with support for facets and time ranges. Uses log search syntax: service:web-app status:error, @http.statuscode:>=400, boolean operators (AND, OR, NOT), and wildcards. Set from to now-1h for recent logs. Use Search Metrics to discover metric names or Search Hosts to find host names for filtering. To investigate an incident, use Search Incidents first, then search logs for that time window and service. - **Search Incidents** - Search Datadog incidents by state, severity, and metadata. Query syntax: state:active, state:resolved, severity:SEV-1. After finding an incident, investigate with: Search Logs for the incident time window, Get Metric Data for relevant metrics, Search Events for related monitor alerts, and Search Services for ownership info. - **Search Hosts** - Search monitored infrastructure hosts. Filter by tag (env:production), name (host:web-01), or partial match. Sort by cpu, iowait, load, status, or apps. Host names from results can scope queries in Get Metric Data (e.g. avg:system.cpu.user{host:web-01}), filter logs in Search Logs (host:web-01), or filter metrics in Search Metrics. Max 1000 results. - **Search Events** - Search Datadog events: monitor state changes, deployment markers, error spikes, and infrastructure events. Filter by sources (e.g. nagios,docker), tags (e.g. env:prod,service:web), and priority (normal or low). Time range defaults to last 24h (POSIX timestamps in seconds). To investigate a monitor alert, use Search Monitors first, then search events for the relevant time range. Follow up with Search Logs for deeper investigation. - **Search Dashboards** - List and search Datadog dashboards. Returns dashboard IDs, titles, URLs, and metadata. Dashboard URL: where region comes from Get Account Info. Use alongside Search Services to find dashboards related to a specific service. - **Post Metric Data** - Post custom time-series metric data points to Datadog. Data appears in dashboards, monitors, and can be queried via Get Metric Data. Points: JSON object where keys are Unix timestamps (seconds) and values are numeric, e.g. {"1640995200": 1.0}. Use Search Metrics to verify a metric name exists, or post to a new name to create it. This is a WRITE operation that creates or appends data to a metric time series. - **Get Metric Data** - Query time-series metric data for analyzing trends and system performance. Query syntax: avg:system.cpu.user{}, sum:requests.count{env:prod} by {host}, max:system.mem.used{service:web}. Both from and to are POSIX timestamps in seconds. Use Search Metrics first to discover available metric names. Use Search Hosts to find valid host tags for scoping. After finding anomalies, use Search Logs to investigate related entries. - **Get Account Info** - Detect the Datadog region for the connected account. Call this FIRST before any other Datadog tool if you do not already know the region. Returns the region domain (e.g. datadoghq.com) which must be passed as the region parameter to Search Logs, Search Monitors, Get Metric Data, and all other Datadog tools. - **List Logs** - Get a list of logs matching a filter query. Uses the GET endpoint with a higher rate limit (3600/hr vs 300/hr). - **Get Account Region** - Detect the Datadog region for the connected account by validating the API key against each regional endpoint. Use this to discover the correct region before calling other Datadog actions. ## How does Viktor work with Datadog? 1. Add Viktor to Slack or Microsoft Teams. 2. Connect Datadog with an API key - Viktor handles authentication. 3. Ask in plain English. Viktor runs the Datadog actions, chains them with your other tools when needed, and reports back. Sensitive actions wait for your approval. ## What is a Datadog AI agent? A Datadog AI agent is an AI that connects to your Datadog account and completes work in it - it doesn't just answer questions about Datadog, it takes the actions. Viktor is that agent: an AI employee that works in Datadog on your behalf and delivers the finished result in Slack or Microsoft Teams. Unlike workflow builders such as Zapier or Make, there is nothing to configure - no triggers to map, no workflows to maintain. You describe the outcome in plain English, and Viktor picks the right Datadog actions, chains them with the other 3,200+ tools it connects to, and asks for approval before anything sensitive runs. ### About Datadog Cloud monitoring as a service ## Security and permissions - Scoped API keys - Viktor stores your key securely, uses only the scopes you grant, and you can revoke it at any time. - Review-first approvals: sensitive Datadog actions wait for your sign-off before they run. - Isolated compute per team, encrypted in transit and at rest - and your data is never used to train models. - SOC 2 Type 1 compliant, with Type 2 and ISO 27001 in progress. ## FAQ ### Does Viktor integrate with Datadog? Yes. Datadog is one of the 3,200+ tools Viktor connects to, via a managed connector. Once connected, anyone on your team can put Viktor to work in Datadog from Slack or Microsoft Teams - no workflow builder, no code. ### How do I connect Datadog to Viktor? Ask Viktor in Slack or Microsoft Teams to connect Datadog, then paste an API key from your Datadog account when prompted. Viktor stores the key securely, uses only the scopes you grant, and you can revoke it at any time. Setup takes about two minutes. ### What can Viktor do in Datadog? Viktor can run 13 Datadog actions, including List Logs, Search Logs, and Search Hosts - and chain them with other tools in a single request. In practice that means Viktor helps you monitor application errors and incidents. If a task spans several actions, Viktor plans the sequence itself and reports back when the work is done. ### Do I need to build workflows to automate Datadog? No. Viktor isn't a workflow builder - there are no triggers to map and no workflows to maintain. You ask for the outcome in plain English in Slack or Microsoft Teams, and Viktor decides which Datadog actions to take, runs them, and reports back. ### Is my Datadog data secure with Viktor? Yes. Viktor connects to Datadog with a scoped API key, runs in an isolated environment per team, and never trains models on your data. Sensitive actions wait for your approval, and you can revoke access at any time. Viktor is SOC 2 Type 1 compliant, with Type 2 and ISO 27001 in progress. ### How much does the Datadog integration cost? Nothing extra - every integration, including Datadog, is available on every plan. You can start free with up to $100 in credits, no credit card required; paid plans start at $50/month. ### Can Viktor use Datadog together with my other tools? Yes - that's the point. Viktor connects to 3,200+ tools and works across them in a single run: it can pull data from Datadog, cross-reference it with another tool - for example Slack or Gmail, and deliver the finished result in Slack or Microsoft Teams. ## Viktor uses Datadog together with - [Slack](https://viktor.com/integrations/slack) - [Gmail](https://viktor.com/integrations/gmail) - [Google Sheets](https://viktor.com/integrations/google-sheets) - [HubSpot](https://viktor.com/integrations/hubspot) - [Notion](https://viktor.com/integrations/notion) - [Salesforce](https://viktor.com/integrations/salesforce) ## More Cloud & Data integrations - [Neon](https://viktor.com/integrations/neon) - [Supabase](https://viktor.com/integrations/supabase) - [Google Cloud](https://viktor.com/integrations/google-cloud) - [Cloudflare](https://viktor.com/integrations/cloudflare) - [Dropbox](https://viktor.com/integrations/dropbox) - [Roblox](https://viktor.com/integrations/roblox) - [WhoisFreaks](https://viktor.com/integrations/whoisfreaks) - [pCloud](https://viktor.com/integrations/pcloud) ## Get started Viktor is free to start - up to $100 in credits, no credit card required. All 3,200+ integrations are included on every plan. Sign up at https://viktor.com or browse all integrations at https://viktor.com/integrations.