Runframe
GuidesIntegrations

Datadog

Create Runframe incidents automatically from Datadog monitors and alerts via webhooks.

Datadog

Create incidents automatically from Datadog monitors and alerts.


How it works

Datadog Monitor Alert → Webhook POST → Runframe → Incident Created

Datadog fires a webhook when a monitor triggers. Runframe parses the payload, maps fields, and creates an incident routed to the correct service and team.


Setup from Runframe

  1. Navigate to Integrations Hub
  2. Click Set up webhook next to Datadog
  3. Copy the unique webhook URL (format: https://api.runframe.io/webhooks/{routingKey})
  4. Link services to route Datadog alerts to specific Runframe services

Setup from Datadog

  1. In Datadog, navigate to Integrations > Webhooks
  2. Create a new webhook with your Runframe webhook URL
  3. Add the service_id tag to your monitors (e.g., service_id:SER-00001)
  4. Customize the payload to include incident details
  5. Associate the webhook with your monitors

Field mapping

Datadog fieldRunframe field
Monitor nameIncident title
Monitor queryDescription
Alert priority (P1-P5)Severity (mapped to SEV0-SEV4)
service_id tagRoutes to specific service
Alert snapshotLink to Datadog dashboard

Severity mapping

Configure how Datadog alert priorities map to Runframe severities:

Datadog priorityDefault Runframe severity
P1Critical (SEV0)
P2High (SEV1)
P3Medium (SEV2)
P4Low (SEV3)
P5Minimal (SEV4)

Customize severity mapping

Adjust severity mapping per monitor based on your service's priorities. A "low" priority database alert might be P1 if the database is business-critical.


Deduplication

Datadog webhooks include a unique event ID. Runframe uses this to deduplicate — the same monitor alert won't create duplicate incidents.


Testing

Trigger a test alert from a Datadog monitor and verify:

  1. Runframe creates the incident
  2. Title, severity, and service routing are correct
  3. The right team is notified