Datadog

Datadog CLI

Direct API access to Datadog observability data — logs, metrics, monitors, dashboards, hosts, and APM spans.

Prerequisites

Set these environment variables:

export DD_API_KEY="your-32-char-hex-api-key"
export DD_APP_KEY="your-application-key"
export DD_SITE="us5.datadoghq.com"  # or datadoghq.com, datadoghq.eu, etc.

Get keys from Datadog:

• API Key: Organization Settings → API Keys
• App Key: Organization Settings → Application Keys

Required scopes (for read-only access):

• dashboards_read, monitors_read, metrics_read, logs_read_data, incidents_read, hosts_read, apm_read

Quick Start

# Test credentials
npx tsx <skill-path>/scripts/datadog.ts validate

# Search logs
npx tsx <skill-path>/scripts/datadog.ts search-logs "status:error" --from -1h

# Query metrics
npx tsx <skill-path>/scripts/datadog.ts query-metrics "avg:system.cpu.user{*}" --from -4h

# List monitors
npx tsx <skill-path>/scripts/datadog.ts list-monitors

Commands

Logs

# Search logs (default: last hour, 50 results)
npx tsx <skill-path>/scripts/datadog.ts search-logs "service:api status:error"
npx tsx <skill-path>/scripts/datadog.ts search-logs "env:prod" --from -30m --limit 100

Metrics

# Query metric timeseries
npx tsx <skill-path>/scripts/datadog.ts query-metrics "avg:system.cpu.user{*}" --from -4h
npx tsx <skill-path>/scripts/datadog.ts query-metrics "sum:requests.count{service:api}.as_count()" --from -1d

Monitors

# List all monitors
npx tsx <skill-path>/scripts/datadog.ts list-monitors

# Filter monitors
npx tsx <skill-path>/scripts/datadog.ts list-monitors --query "status:alert"

# Get specific monitor
npx tsx <skill-path>/scripts/datadog.ts get-monitor 12345

Dashboards

npx tsx <skill-path>/scripts/datadog.ts list-dashboards

Hosts

npx tsx <skill-path>/scripts/datadog.ts list-hosts
npx tsx <skill-path>/scripts/datadog.ts list-hosts --filter "env:production"

Incidents

npx tsx <skill-path>/scripts/datadog.ts list-incidents

APM (Spans & Services)

# Search spans
npx tsx <skill-path>/scripts/datadog.ts search-spans "service:api @http.status_code:500" --from -1h

# List services
npx tsx <skill-path>/scripts/datadog.ts list-services

Time Formats

The --from and --to flags accept:

• Relative: -1h, -30m, -1d, -4h
• ISO 8601: 2026-03-20T00:00:00Z

Datadog Sites

Troubleshooting

403 Forbidden:

• Check DD_SITE matches your Datadog region
• Verify app key has required scopes
• Confirm API key is active

Credentials not found:

• Ensure DD_API_KEY and DD_APP_KEY are exported
• Check for typos in env var names