# Workshop Datadog To Elastic Alerts

> Workshop skill for metrics adoption on Elastic Observability Serverless (existing customers): convert Datadog-style monitor JSON into Kibana alerting rule drafts; complements Elastic Agent Skills for alerting APIs.

- Skill: `elastic/workshop-datadog-to-elastic-alerts` (Agent Skill)
- Install (CLI): `npx skillmds@latest add elastic/workshop-datadog-to-elastic-alerts`
- Raw SKILL.md: https://api.skillmd.com/api/skills/elastic/workshop-datadog-to-elastic-alerts/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: DevOps & Infra
- Author: elastic (https://skillmd.com/u/elastic)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/elastic/workshop-datadog-to-elastic-alerts

---


# Datadog-style monitors → Elastic alerts (workshop)

## When to use

Use when adopting **metrics alerting** on Elastic: translate `assets/datadog/monitor-*.json` into **Kibana
alerting** JSON skeletons, then tune for live indices and rules APIs.

## Workflow

```bash
python3 tools/datadog_to_elastic_alert.py assets/datadog/<monitor>.json -o build/elastic-alerts/<name>-elastic.json
```

Then refine `params` (index patterns, query DSL, thresholds) using Kibana or the alerting APIs described in upstream
[Elastic Agent Skills](https://github.com/elastic/agent-skills).

## Notes

- Datadog exports vary; validate fields (`type`, `query`, `options.thresholds`).
- Anomaly monitors map conceptually to **Elastic ML** jobs + anomaly rules when ML is available.