To create a monitor in Datadog, hover over Monitors in the main menu and click New Monitor in the sub-menu. To create a monitor programmatically, see the Datadog API or community maintained libraries.

Select a monitor type:

  • Host - Check if one or more hosts are reporting to Datadog.
  • Metric - Compare values of a metric with a user-defined threshold.
  • Anomaly - Detect anomalous behavior for a metric based on historical data.
  • Outlier - Alert on members of a group behaving differently than the others.
  • Forecast - Alert when a metric is projected to cross a threshold.
  • Integration - Monitor metric values or health status from a specific integration.
  • Live Process - Check if one or more processes are running on a host.
  • Process Check - Watch the status produced by the process.up service check.
  • Network - Check the status of TCP/HTTP endpoints.
  • Custom Check - Monitor the status of arbitrary custom checks.
  • Event - Monitor events gathered by Datadog.
  • Logs - Monitor logs gathered by Datadog.
  • APM - Compare an APM metric to a user-defined threshold.
  • Real User Monitoring - Monitor real user data gathered by Datadog.
  • Watchdog - Get notified when Watchdog detects anomalous behavior.
  • Composite - Alert on an expression combining multiple monitors.


Import a monitor to Datadog with JSON using the main navigation: Monitors –> New Monitor –> Import.

You can obtain a JSON export of any monitor from the monitor’s status page. Click the settings cog (top right) and choose Export from the menu.


For all monitor types, monitor changes create an event in the event stream. This event explains the change and displays the user that made the change.

If you made changes to a monitor, you can see examples with the following event search:

Datadog also provides a notification option for changes to monitors you create. At the bottom of the monitor editor, under Notify your team, choose Notify in the drop-down next to: alert recipients when this alert is modified.

The notify setting sends an email with the monitor audit event to all people who are alerted in the specific monitor. The monitor audit event also appears in the event stream.