SIEM integration
Automate Datadog Cloud SIEM with plain language
Read Datadog Cloud SIEM security signals and detection rules, and post an event when VernacSecure SuperBot™ observes a change worth correlating.
What you can do
Datadog Cloud SIEM — v2 Security Monitoring API
- List security signals
- Read detection rules
- Post an event into the Datadog event stream
Connection: header authentication against https://api.datadoghq.com. Credentials are encrypted at rest, or prompted per action if you prefer never to store them.
Example
Ask in plain English
Prompt: “Show the last 24 hours of high severity alerts in Datadog Cloud SIEM”
Result: VernacSecure SuperBot™ runs the search, normalises the results and offers follow-up actions on other integrations.
Read actions
- Fetch security signals — Lists Cloud SIEM security signals.
- Fetch detection rules — Lists security monitoring rules.
Write actions
- Post event — Posts a VernacSecure SuperBot™ event.
Related siem automation pages
Armor Point · Devo Platform · Elastic Security · Exabeam Security Operations · Fortinet FortiSIEM · Google Security Operations (Chronicle)