Slack

Overview

Connect Slack to Datadog to help your team collaborate by:

• Sharing graphs in private or public Slack channels.
• Receiving alerts and notifications from Datadog within Slack.
• Muting triggering monitors and declaring incidents from Slack.
• Automatically unfurling links to display a preview for log events, traces, and dashboard widgets.

Setup

Datadog for Slack is not available for the site. To send notifications to Slack on the US1-FED site, use the Slack webhook (Legacy).

Connecting Slack to Datadog

Install Datadog for Slack in your Slack workspace:

1. On the Slack integration tile, click Configuration, then click Connect Slack Account.
2. Click Allow to grant Datadog permission to access your Slack workspace. You may need your Slack workspace admin to approve this change.
3. Specify the channels where you want to receive monitor alerts.
4. Private channels only: In Slack, navigate to the channel where you want to receive monitor alerts and send /invite @Datadog to the channel.

Installation

Use the Slack integration tile on the Datadog site to install the integration.

Configuration

1. In your Slack account, go to the Datadog (Legacy) app.
2. Click Install > Add Integration, then copy the Slack Webhook URL.
3. On the Datadog-Slack integration tile, click Configuration, then click Add Account.
4. Enter a Slack Account Name of your choice.
5. Paste the webhook URL in the Slack Account Hook field.
6. Click Save.
7. Add your Slack Channels to post to:

8. To be notified for every comment on a graph, select the Transfer user comments checkbox. If this box is left unchecked, you must use the @slack-<ACCOUNT_NAME>-<CHANNEL_NAME> syntax to post comments to Slack. You can use @slack-<CHANNEL_NAME> if you are only using one account or referring to the first account.

You can also configure sending alerts to Slack from monitors and the event stream.

Usage

Once the Slack app has been installed, you can invite Datadog to any channel:

/invite @Datadog

To see the available actions you can take in a Slack channel, use the /datadog command. The available actions will change depending on the channel you’re in. You can also use the /dd alias to run /datadog commands.

To view all available commands in Slack:

/datadog help

Home Tab

Use the Home tab on the Datadog App in Slack to view your starred dashboards, notebooks, and services. You can also view a list of monitors that were triggered in the past 24 hours and their associated Slack channels. If you’re a member of more than one Datadog account, filter the tab by switching between accounts.

Monitors

With the Slack integration, you can receive monitor alerts and mute monitors directly from Slack. For detailed instructions on how to create monitors, see Configuring Monitors. To send monitor alerts to a Slack channel, invite Datadog to the channel first using the /invite @Datadog command.

Notification messages

You can use the same rules, variables, and tags as standard Datadog Notifications. For example, this notification pings a team in a Slack channel called infrastructure when a monitor is renotifying:

CPU usage has exceeded {{warn_threshold}} on {{ @machine_id.name }}.
{{#is_renotify}}
Notifying @slack-infrastructure <!subteam^12345>
{{/is_renotify}}

Channels

To specify a Slack channel when configuring a notification message, type @slack in the monitor message box to see the available list of channels you can send the notification to.

Note: Trailing special characters in a channel name are not supported for Slack @-notifications. For example, @----critical_alerts works, but @--critical_alerts-- does not.

@-mentions

Use the following commands to create @-mentions in notification messages:

You can also use message template variables to dynamically build @-mentions. For example, if the rendered variable corresponds to a specific channel in Slack:

• @slack-{{owner.name}} sends notifications to the #owner.name’s channel.
• @slack-{{host.name}} sends notifications to the #host.name channel.

To create @-mentions that go to specific email addresses:

• @team-{{team.name}}@company.com sends an email to the team’s mailing list.

Monitor alerts in Slack

When a monitor alert is sent a Slack channel, it contains several fields:

• The notification message
• A snapshot (graph) of the query that triggered your monitor
• Related tags
• The names of the users or groups that were notified

To customize the content included in monitor alert messages in Slack, navigate to the Slack integration tile. For each channel, select or clear the checkbox for each monitor alert option.

Migrate monitors from Slack Webhook (Legacy) to Datadog for Slack

If your monitors are using the legacy Slack webhooks, there are two ways you can update your monitors to be sent from the Slack app:

• Bulk upgrade: Bulk upgrade all of your monitors by clicking the Upgrade button at the top of the configuration for each of your Slack accounts in Datadog’s integration tile.
• Individual upgrades: Manually add channels to the new configuration in the Slack integration tile. You may need to remove duplicate references to the same channels.

Dashboards

You can post dashboard widget snapshots to any Slack channel. For a list of supported widgets, see Scheduled Reports.

To share a dashboard widget in Slack:

• In Datadog, hover over a dashboard widget and press CMD + C or CTRL + C, or click the Copy button from the share menu, and then paste the link into Slack.
• In a Slack channel, send the /datadog dashboard or /datadog command, and then click the Share Dashboard Widget button.
• Use the Workflow Builder that Datadog for Slack provides to post widget snapshots as part of your Slack automation workflows.

Note: Slack recently introduced a new version of Workflow Builder that does not yet support third-party app integrations including Datadog.

Incidents

Anyone in your Slack org can declare an incident, regardless of whether they have access to Datadog. When a new incident is created, a corresponding Slack channel #incident-(unique number ID) is created, and a message is sent to the channel telling you the new incident channel to use. The channel topic changes with the incident.

Incident commands

To declare a new incident from Slack:

/datadog incident 

To update the incident state (such as severity):

/datadog incident update

To list all open (active and stable) incidents:

/datadog incident list

To send the message to the Incident Timeline, use the message actions command (the three vertical dots that appear hovering over a message sent in an #incident channel).

Global incident updates channel

A global incident updates channel provides your team with organization-wide visibility into the status of all incidents directly from your Slack workspace. Select which channel in your workspace to post these updates to, and the channel receives the following posts:

• Newly declared incidents.
• Changes to severity, status transition, and incident commander.
• Links to the incident’s overview page in app.
• Link to join dedicated incident Slack channels.

To set up a global incident updates channel:

1. In Datadog, navigate to the Incidents > Settings > Integrations page.
2. On the Slack tile, click the Send all incident updates to a global channel toggle.
3. Select the Slack workspace and Slack channel where you want the incident updates to be posted.

Manage incident tasks

By using Slack actions and the /datadog Slack commands, you can create and manage incident tasks directly from Slack. Incident task commands must be used in an incident channel.

Slack actions

To create a task using Slack actions, hover over any message sent in an incident channel. On hover, three dots appear to the right of the message, allowing you to Add Task to Incident.

Slack commands

To create a task for an incident, use the /datadog task command. A modal appears that allows you to include a description of the task, assign teammates, and set a due date.

To show a list of all tasks created for the incident, use the /datadog task list command. Use this list to mark tasks as complete or reopen them.

All tasks created can be managed on the Remediation tab of an incident. For more information, see the Incident Management documentation.

Permissions

Datadog for Slack requires the following OAuth Scopes. For more information, see the Slack permission scopes documentation.

Enterprise Grid Audit Logs

Ingest events and actions that occur within your Slack Enterprise Grid, including:

• User management events, such as user creation, deletion, and updates. This includes changes to user roles, permissions, and profiles.
• Workspace and channel management events, including actions related to the creation, modification, and deletion of channels and workspaces. It also tracks changes in workspace settings and permissions.
• File and app management events, including tracking the upload, download, and deletion of files, as well as monitoring the installation, update, and removal of Slack apps and integrations.
• Security and compliance events, including login attempts, password changes, and two-factor authentication events, as well as compliance-related actions like data exports and access to sensitive information.
• Audit trail of administrative actions, including changes made by Slack admins and workspace owners, such as policy updates, security settings changes, and other administrative modifications.
• External sharing and collaboration events, including the creation of shared channels, external invitations, and guest account activities.

For more information, see the official Slack documentation.

Each event captured provides detailed insights, including:

• Action: What activity was performed. For a full list of supported actions supported, see the official Slack documentation.
• Actor: The user in the workspace who generated the event.
• Entity: The thing the actor has taken action upon.
• Context: The location (workspace or enterprise) where the actor took action on the entity.

Installation

Only owners of an Enterprise Grid organization may authorize Datadog to collect Slack audit logs.

1. On the Slack integration tile, click the Audit Logs tab.
2. Click the Connect Enterprise Grid button to be redirected to Slack for authorization.

Requested Permission Scopes

Bot Token Scopes

Optional Bot Token Scopes

Datadog for Slack offers features that require enabling additional optional Bot Token Scopes. These scopes are added dynamically based on feature enablement and are not added during the initial installation.

User Token Scopes

Optional User Token Scopes

Datadog for Slack offers features that require enabling additional optional User Token Scopes. These scopes are added dynamically based on feature enablement and are not added during the initial installation.

Data Collected

Metrics

The integration for Slack does not provide any metrics.

Events

The integration for Slack does not include any events.

Service Checks

The integration for Slack does not include any service checks.

Troubleshooting

Need help? Contact Datadog support.