---
title: Getting Started with Datadog
description: Ingest and process your Alcide logs
breadcrumbs: Docs > Integrations > Alcide
---

# Alcide

## Overview{% #overview %}

Alcide provides Kubernetes audit and anomaly monitoring services. This integration allows Datadog to ingest and process logs from Alcide.

## Setup{% #setup %}

### Installation{% #installation %}

Datadog automatically enables a logs processing pipeline when Alcide logs are detected. No installation steps are required.

### Configuration{% #configuration %}

In Alcide, select the *Integrations* tab and go to the *Detections Integrations Configuration* section, which is used to configure integrations for threat intel logs.

1. Select **HTTP API** as your target.

1. In the URL box, enter `https://http-intake.logs.<DATADOG_SITE>/api/v2/logs?dd-api-key=<DATADOG_API_KEY>&ddsource=alcide`. Replace the placeholder value `<DATADOG_SITE>` with `datadoghq.com` for the US site, or with `datadoghq.eu` for the EU site. Replace the placeholder value `<DATADOG_API_KEY>` with your [Datadog API key](https://app.datadoghq.com/organization-settings/api-keys).

1. Under *Entities Types*, select the types that you want to forward threat intel about. Datadog recommends selecting all of these.

1. Under *Detection Categories*, select the categories you wish to forward. Datadog recommends selecting both *incidents* and *anomalies*.

1. Under *Detection Confidence*, select your desired levels of confidence. Datadog recommends selecting at least *high* and *medium*.

1. Optionally, you can create inclusion and exclusion filters on entities using the *Entities Matching* and *Entities Not Matching* boxes.

Then, go to the *Selected Audit Entries Integration Configuration* section, located underneath the previous section. This section is used to configure integrations for audit logs.

1. Select **HTTP API** as your target.

1. In the URL box, enter `https://http-intake.logs.<DATADOG_SITE>/api/v2/logs?dd-api-key=<DATADOG_API_KEY>&ddsource=alcide`. Replace the placeholder value `<DATADOG_SITE>` with `datadoghq.com` for the US site, or with `datadoghq.eu` for the EU site. Replace the placeholder value `<DATADOG_API_KEY>` with your [Datadog API key](https://app.datadoghq.com/organization-settings/api-keys).

## Troubleshooting{% #troubleshooting %}

Need help? Contact [Datadog support](https://docs.datadoghq.com/help/).