dd-audit
Find who changed what in your Datadog account.
What it does
Investigates Datadog activity to explain configuration changes, suspected key compromise, cost spikes, compliance evidence, and AI actions.
When to use it
Use for change attribution, suspicious API key activity, usage spikes, compliance reports, or AI activity investigations.
How to use it
Give it a Datadog audit question; it investigates the relevant activity and returns findings or a formatted evidence report.
Uses
What you need · 8
Requires authenticated access to Datadog through OAuth2 login or API and application keys with audit_logs_read scope.
Requires pup to authenticate and query Audit Trail.
Uses jq to transform audit query results into investigation data and report summaries.
Access · 1
This skill
Datadog
Reads Datadog audit and usage records