---

name: datadog-observability description: Datadog monitoring, APM, logs, and infrastructure observability version: 1.0.0 allowed-tools: [Bash, Read, WebFetch]

Datadog Observability Skill

Overview

Provides 90%+ context savings vs raw Datadog API integration. Multi-service support with progressive disclosure by observability category.

Requirements

• Datadog API configured
• Environment variables:
  • DD_API_KEY (required): Datadog API key
  • DD_APP_KEY (required): Datadog application key
  • DD_SITE (optional): Datadog site (default: datadoghq.com)

Tools (Progressive Disclosure)

Metrics Operations

APM/Traces Operations

Logs Operations

Monitors/Alerts Operations

Infrastructure Operations

Quick Reference

Copy# Query metrics
curl -X POST "https://api.${DD_SITE}/api/v1/query" \
  -H "DD-API-KEY: ${DD_API_KEY}" \
  -H "DD-APPLICATION-KEY: ${DD_APP_KEY}" \
  -d '{"query":"avg:system.cpu.user{*}"}'

# Search logs
curl -X POST "https://api.${DD_SITE}/api/v2/logs/events/search" \
  -H "DD-API-KEY: ${DD_API_KEY}" \
  -H "DD-APPLICATION-KEY: ${DD_APP_KEY}" \
  -d '{"filter":{"query":"service:web","from":"now-1h","to":"now"}}'

# List monitors
curl -X GET "https://api.${DD_SITE}/api/v1/monitor" \
  -H "DD-API-KEY: ${DD_API_KEY}" \
  -H "DD-APPLICATION-KEY: ${DD_APP_KEY}"

# Get service summary
curl -X GET "https://api.${DD_SITE}/api/v1/apm/service/{service_name}" \
  -H "DD-API-KEY: ${DD_API_KEY}" \
  -H "DD-APPLICATION-KEY: ${DD_APP_KEY}"

Configuration

• DD_API_KEY: Datadog API key (required)
• DD_APP_KEY: Datadog application key (required)
• DD_SITE: Datadog site domain (optional, default: datadoghq.com)
  • US1: datadoghq.com
  • US3: us3.datadoghq.com
  • US5: us5.datadoghq.com
  • EU: datadoghq.eu
  • AP1: ap1.datadoghq.com

Security

⚠️ Never hardcode API keys or application keys ⚠️ Use environment variables or secret management ⚠️ Monitor mutations (create, mute) require confirmation ⚠️ Never expose DD_API_KEY or DD_APP_KEY in logs or responses

Agent Integration

• devops (primary): Infrastructure monitoring and SRE
• incident-responder (primary): Crisis management and troubleshooting
• performance-engineer (secondary): Performance analysis
• developer (secondary): Application monitoring

Troubleshooting