audit-logs

Query and manage Datadog Audit Trail events through the Datadog API.

Updated Jan 14, 2022
One-click install
npx skills add https://github.com/alexmarucci/dotfiles --skill audit-logs-alexmarucci
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: audit-logs
Source: https://github.com/alexmarucci/dotfiles/tree/main/claude/skills/audit-logs
Command: npx skills add https://github.com/alexmarucci/dotfiles --skill audit-logs-alexmarucci

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires DD_API_KEY, DD_APP_KEY, DD_SITE, and includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill helps users query and manage Datadog Audit Trail events, making it easier to comply with regulations, audit security, and track user actions across their Datadog organization.

Core Features & Use Cases

  • Search Audit Events: Query audit trail events with complex filtering to identify specific events.
  • Track User Actions: Monitor user actions in Datadog for security and compliance.
  • API Usage Tracking: Monitor API key usage and requests to ensure security.
  • Configuration Changes: Track changes to dashboards, monitors, and resources.
  • Compliance Reporting: Generate audit reports for regulatory compliance.
  • Authentication Monitoring: Track user logins and role changes for security.
  • Security Auditing: Investigate suspicious activities and access patterns.

Quick Start

Use the audit-logs skill to search for recent audit events in the last 24 hours.

Frequently Asked Questions about audit-logs

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I query Datadog Audit Trail events for compliance reporting?

To query Datadog Audit Trail events for compliance reporting, use complex filtering to search events, monitor user actions, and track configuration changes. You can generate reports to investigate suspicious activities and access patterns.

What do I need to access Datadog audit logs via the API?

Accessing Datadog audit logs via the API requires valid DD_API_KEY, DD_APP_KEY, and DD_SITE configurations. Your account must also have the specific audit_logs_read permission enabled to retrieve event data.

Can I monitor user authentication and configuration changes in Datadog?

Yes, you can monitor user authentication and configuration changes in Datadog. The audit trail tracks user logins, role changes, and modifications to dashboards and monitors to ensure security and compliance.

How does security auditing work with Datadog API usage tracking?

Security auditing with Datadog API usage tracking works by monitoring API key requests and user actions. This helps identify suspicious activities and access patterns across your organization for security investigations.

What is the best way to track user actions across a Datadog organization?

The best way to track user actions across a Datadog organization is by querying the Datadog Audit Trail. It monitors API key usage, authentication events, and resource modifications to generate comprehensive compliance reports.