Datadog Observability & Analytics Platform Setup for Workbench

This article explains how to connect your Datadog Observability & Analytics Platform device to Workbench.

Step 1: Create an Expel Service Account and API credentials

You must have the System Administrator role on Datadog to add a service account. Think carefully about the data you enter, because you cannot make changes to the service account after you create it. You have to delete and start over.

Having read-only access to the interface of your technology allows Expel to dig deeper during Investigations. Our device health team uses this access to investigate potential health issues with your tech. For more information, see Why Expel Asks for Console Access.

1. Log in to the Datadog console.

2. Navigate to Organization Settings > API Keys.

3. Select + New Key.

4. Name the key, then select Create Key.

5. Copy and paste or write down the API key for later use.

6. Navigate to Organization Settings > Service Accounts.

7. Select + New Service Account.

8. Enter the following details for the service account:

   • Name - enter "Expel API Integration".

   • Email - enter "[e-mail]"

   • Role - choose the Datadog Read Only Role.

9. Select Create Service Account.

10. Select the created service account. A popup appears.

11. On the service account popup, select + New Key.

12. Copy+paste or write down the Application key for later use.

Step 2: Configure the Technology in Workbench

Now that we have the correct access configured and noted the credentials, we can integrate your tech with Workbench.

1. Log in to Workbench.

2. Navigate to Organization Settings > Security Devices.

3. Select Add Security Device.

4. Search for and select the Datadog Observability & Analytics Platform integration.

5. Complete these fields using the credentials and information you collected in Step 1:

   • Name - enter the host name of the device.

   • Location - enter the geographic location of the appliance.

   • Datadog site - select your site.

   • API key - enter the API key generated in Step 1.

   • Application key - enter the Application key generated in Step 1.

6. Select Save.

7. Select Set up now (recommended) from the console access dropdown. Why do we need console access?

8. Complete the fields as follows:

   • Console URL - enter the console URL from the Server address in the Connection Settings area above. At the end of the URL, type /login.

   • Username - enter the user name you created above.

   • Password - enter the password you created above.

   • Two-factor secret key (32-character code) - depending on how your organization enforces log-ins, this field may not apply to you. In these cases, you can leave it blank.

9. Select Save.

Your device should be created successfully within a few seconds. A few reminders:

• After your connection is healthy, it will take some time for your device to begin polling and receiving data.

• To check on the status, select the downward arrow for your device in the first column and choose View details.

• Polling will happen first; data will be received after that. You must refresh the page to see updates.

• If your device does not begin polling within 15 minutes, and does not begin receiving data within 30 minutes, contact our support team for help.

• To check if alerts are coming through, navigate to Dashboards > Alert Analysis. Scroll to the device you want to check, and select the Expel Alerts tab to reveal more alert information. It can take 36 to 72 hours for alerts to appear after setup, as we tune your device.