Datadog Service Catalog

Overview

Datadog Service Catalog is a centralized place to access important information about all services in your organization. Achieve end-to-end service ownership at scale, get real-time performance insights, detect and address reliability and security risks, and manage application dependencies all in one place. Access team communications tools such as Slack, source control such as GitHub, Datadog dashboards, and Datadog views that receive and monitor telemetry data for each service.

Compared to the APM Service List, the Service Catalog includes services that do not actively emit trace metrics, which means you do not need to instrument your service for it to appear. Service Catalog also automatically includes services detected by USM and RUM. Service Catalog supports a one hour look back window. If you do not see your APM services in Service Catalog, they most likely were not sending active trace metrics during the last hour. You may still find these services in APM Service List.

The Service Catalog is useful for:

Training new developers and site reliability engineers by providing a clear view of all services, their structures, and links to more information.
Improving the on-call experience for everyone by establishing correct ownership information and communication channels, alongside easy access to monitoring and troubleshooting details.
Embedding links to solutions and troubleshooting tools such as runbooks and documentation directly in the observability tooling engineers are already using.
Speeding incident recovery by increasing confidence and simplifying locating owners of upstream and downstream services and dependencies.
Detecting which services aren’t reporting observability data or having that data monitored.
Facilitating the practice of good tagging to optimize cross-telemetry insights.
Providing engineering leadership with a high-level view of reliability practices across teams and services.
Spotting issues like missing SLOs, monitors, or services without ownership.
Proactively identifying services exposed to application attacks.
Reducing application risks by finding and fixing known security vulnerabilities in the dependencies of your services.

Browse the Service Catalog

On the Service Catalog page, see the list of services in your Datadog organization which are either detected from collected data or manually declared by someone registering the service. To find a particular service, search by its name. To filter the list, select one or more facets. For example, to see detected services without a service definition yet, click the Ownership Info > Telemetry Only facet. You may find it helpful to filter by your team name or scope the metrics displayed to particular environments and clusters in order to see only matching services in the list.

The Service Catalog list is sortable by service type, service name, and many of the other columns. You can find missing ownership by sorting by team in the Ownership view and looking for blanks. Or you can sort by urgency in the Reliability view and see services with the most triggered monitors.

Information about the service provided by the service definition or by Datadog products collecting observability data is organized into views: Ownership, Reliability, Performance, and Security.

Ownership view

In the Ownership tab, you can click the icons in the Contact and </> columns and be directed to the tools and projects specified in the service definition. For example, you can access the owning team’s Slack channel or GitHub repository containing the service code.

The Telemetry column displays what types of telemetry data Datadog is collecting for the service. Clicking on the icons directs you into the corresponding Datadog product view. For example, the Agent sends traces to Datadog, and you can click the Traces icon to view them in APM.

Click the kebab menu to the right hand corner to edit the service definition (if it exists) or link to one if the service is not defined. You may have to set up an integration with your source code system first.

Sort the table by Team or On Call columns to see which services each team is responsible for, and identify services where ownership and responsibility are not specified yet.

Reliability view

The Reliability tab contains information about the stability of your services. Sort the table by clicking on columns in the list to reveal:

Which services deployed most recently, or have not deployed for a long time.
Which services are reporting the most errors, and whether they are new issues.
Which services have ongoing incidents.
Which services have monitors that are triggered.

Click the Settings icon on the right hand corner to hide columns from the service list.

Performance view

The Performance tab provides several ways to view how your services are performing and what needs the most attention. Sort the table by clicking columns to reveal services that:

Deployed most recently, or have not deployed for a long time
Are receiving the most requests per second, or are not receiving any traffic
Have the highest latency at various percentiles
Have the highest error numbers or rates
Are running on the most pods, hosts, or serverless environments
Have related dashboards where you can see more performance data breakdowns, and identify which ones need to have dashboards added to their service definition
Have the highest or lowest Apdex scores
Have monitors that are triggered

Click the Settings icon on the right hand corner to hide metric columns from the service list.

Security view

The Security tab provides several ways to assess and improve the security posture of your services. This includes understanding the number and severity of known security vulnerabilities in the open source libraries, and viewing how your services are targeted by attackers. Sort the table by clicking columns to reveal services that:

Expose known security vulnerabilities, including the individual severities.
Are receiving the most attack attempts.
Are targeted by the most attackers.
Have the most severe threats, where the services are impacted by the attacks.
Are monitored and protected by Application Security Management

To access additional details describing security vulnerabilities and signals, click on the service row to open a detailed side panel. Alternatively, click on the pop-over View Service Details button, which opens the service page, and in turn, its security tab.

Click the Settings icon on the right hand corner to hide metric columns from the service list.

Investigate a service

Clicking on a service opens a side panel with details including:

Ownership information from the service definition such as links to team contacts, source code, and supplemental information like documentation and dashboards.
Reliability information including deployment status, SLOs, ongoing incidents, and error information.
Performance graphs showing requests, errors, latency, and time spent by downstream services.
Security information including known vulnerabilities exposed in the service’s libraries, the timeline and type of attacks, identity of attackers, and security threats impacting your services.
Configuration completeness status for Datadog products that can collect data for the service.
Service definition in YAML with a link to the service’s source code.
An interactive service map displaying services upstream and downstream from this service.

Click View Related and select a page from the dropdown menu to navigate into related pages in Datadog, such as the APM Service page and service map for this service, or related telemetry data pages, such as Distributed Tracing, Infrastructure, Network Performance, Log Management, RUM, and Continuous Profiler.

Role based access and permissions

For general information, see Role Based Access Control and Role Permissions.

Read permission

The Service Catalog read permission allows a user to read service catalog data, which enables the following features:

Service Catalog list
Discover UI
Service Definition endpoint: /api/v2/services/definition/<service_name>

The permission is enabled by default in the Datadog Read Only Role and Datadog Standard Role.

Write permission

The Service Catalog write permission allows a user to modify service catalog data. The write permission is required for the following features:

Inserting or Updating a Service Definition with the POST /api/v2/services/definitions endpoint
Deleting a Service Definition with the DELETE /api/v2/services/definition/<service_name> endpoint
Completing the onboarding process in the Discover Services UI

The permission is enabled by default in the Datadog Admin Role and Datadog Standard Role.