mirror of
https://github.com/netbirdio/docs.git
synced 2026-05-01 23:06:37 +00:00
59 lines
3.1 KiB
Plaintext
59 lines
3.1 KiB
Plaintext
# Stream Network Activity to Datadog Cloud SIEM
|
|
|
|
Datadog is a monitoring and analytics platform for cloud-scale applications. Datadog Cloud SIEM provides real-time threat
|
|
detection and security monitoring for cloud environments. By using the NetBird-Datadog integration, you can stream [network activity](/how-to/monitor-system-and-network-activity) to Datadog Cloud SIEM for real-time monitoring
|
|
and threat detection across your private network.
|
|
|
|
NetBird integrates with Datadog using the [Datadog Log Collection HTTP API](https://docs.datadoghq.com/api/latest/logs/#send-logs)
|
|
and sends activity events to Datadog in real-time once they occur. The events appear in the [Datadog Log Explorer](https://docs.datadoghq.com/logs/explorer/), where you can
|
|
search, filter, and analyze them right away.
|
|
|
|
<Note>
|
|
This feature is only available in the cloud version of NetBird.
|
|
</Note>
|
|
|
|
## Prerequisites
|
|
|
|
Before you start creating and configuring a Datadog event streaming integration, ensure that you have the following:
|
|
- A Datadog account with permissions to create and manage API keys. If you don't have the required permissions,
|
|
ask your Datadog administrator to grant them to you.
|
|
|
|
## Create a Datdog API Key
|
|
- Navigate to the [API Keys](https://app.datadoghq.eu/organization-settings/api-keys) page
|
|
- Click `+ New Key` at the top
|
|
- Give it a descriptive name like `NetBird Event Streaming`
|
|
- Click `Create Key`
|
|
- Copy the key. You will need this key when configuring an integration in NetBird.
|
|
|
|
## Create an Integration in NetBird
|
|
- Navigate to the [Integrations » Event Streaming](https://preview.netbird.io/integrations) tab in the NetBird Dashboard
|
|
<p>
|
|
<img src="/docs-static/img/how-to-guides/event-streaming-integration.png" alt="event-streaming-integration" className="imagewrapper-big"/>
|
|
</p>
|
|
|
|
- Enable and configure the Datadog integration
|
|
- First select the region of your Datadog account (for more details see [Datadog Documentation](https://docs.datadoghq.com/getting_started/site/))
|
|
<p>
|
|
<img src="/docs-static/img/how-to-guides/datadog-region-select.png" alt="datadog-region-select" className="imagewrapper" />
|
|
</p>
|
|
- Then enter the API key you created in [Step 1](#step-1-create-a-datdog-api-key) and click `Connect`
|
|
<p>
|
|
<img src="/docs-static/img/how-to-guides/datadog-api-key.png" alt="datadog-api-key" className="imagewrapper" />
|
|
</p>
|
|
|
|
## Verify the Integration
|
|
|
|
After configuring the Datadog integration in NetBird, you can verify that the integration is working correctly by checking
|
|
the Datadog Log Explorer for incoming events. If the integration is successful, you should see two events from the netbird service
|
|
in the Log Explorer:
|
|
- `integration test`
|
|
- `integration created`
|
|
|
|
<p>
|
|
<img src="/docs-static/img/how-to-guides/activity-event-streaming/verify-datadog-integration.png" alt="verify-datadog-integration" className="imagewrapper"/>
|
|
</p>
|
|
|
|
The `integration test` event is sent to validate whether the provided credentials are correct and NetBird can stream events.
|
|
The `integration created` event is sent when the integration is successfully created.
|
|
|
|
The integration is now set up and ready to stream network activity events to Datadog. |