Cisco Multicloud Defense User Guide

PDF

Cisco Multicloud Defense User Guide

Datadog

Want to summarize with AI?

Log in

Learn how the Datadog integration sends Cisco Multicloud Defense alerts to Datadog through an Alert Service Profile and associated Alert Rule.


Once configured, Multicloud Defense alerts will sent to Datadog using the defined Alert Service Profile and Alert Rule.


Create an Alert Profile Service

Before you begin

In order to send alerts to Datadog, the following information is required:

  • Datadog account

  • API Key

Tip

Procedure

1.

Navigate to System and Accounts > Service Alerts > Services.

2.

Click Create.

3.

Name - Enter unique name for the alert integration. Example Multicloud Defense-Datadog-profile.

4.

Description (optional) - Enter a description for the alert integration.

5.

Type - Using the pulldown, choose Datadog.

6.

API Key - Specify the Datadog API Key used to authenticate the communication.

7.

Click Save.

What to do next

Create an alert rule with this new profile.


Create an Alert Rule

Before you begin

In order to send alerts to Datadog, the following information is required:

  • Datadog account

  • API Key

Tip

Procedure

1.

Navigate to System and Accounts > Service Alerts > Alert Rules.

2.

Click Create.

3.

Profile Name - Enter unique name for the integration. Example Multicloud Defense-Datadog-alert-rule.

4.

Description (optional) - Enter a description for the alert rule.

5.

Alert Profile - Using the pulldown, choose a PagerDuty Alert Profile. As example, select profile created above Multicloud Defense-Datadog-profile.

6.

(Optional)Description - Enter a description for the aler trule.

7.

Alert Profile - Expand the drop-down menu and select a Microsoft Teams alert profile.

8.

Type - Expand the drop-down menu and select one of the following types:

  • System Logs

  • Audit Logs

  • Discovery

If you select Audit Logs, there are no other configurable items. Click Save to finalize the rule.

9.

If you select either System Logs or Discovery as your Type, then expand the Sub Type drp-down menu and select one of the following options:

  • Gateway

  • Account

  • Controller

10.

Expand the Severitydrop-down menu and select one of the following labels. Note that the options below are dependent on the Type you selected in step 7.

  • Info

  • Warning

  • Medium

  • High

  • Critical

11.

Enabled - This option is checked by default to enable and implement this alert immediately after saving. Unceck this box if you do not to immediately apply the rule to your environment.

12.

Click Save.