.svg)
.svg)
Overview
Rootly workflows can interact with Datadog during an incident. You can create Datadog notebooks to capture investigation notes, pull graph snapshots to attach signal data to the incident record, and fetch dashboards for situational awareness — all triggered automatically or on demand.These workflow actions require the Datadog integration to be connected. See Installation if you have not yet set it up.
Available Datadog Workflow Actions
| Action | Description |
|---|---|
| Create Datadog Notebook | Creates a new notebook in your Datadog account, optionally pre-populated with incident data |
| Get Datadog Graph Snapshot | Retrieves a point-in-time snapshot of a Datadog metric graph and attaches it to the incident |
| Get Datadog Dashboard | Fetches a Datadog dashboard URL and surfaces it in the incident timeline |
Create Datadog Notebook
Use this action to automatically create a Datadog notebook when an incident starts or reaches a specific status. Notebooks are useful for capturing investigation notes, timelines, and graphs in a single Datadog-native view.Open workflow creation
Navigate to Workflows in Rootly and click Create Workflow, or open an existing workflow to edit it.
Configure the action
| Field | Required | Description |
|---|---|---|
| Name | No | A label for this action step. Does not affect behavior. |
| Notebook Name | Yes | The title of the notebook. Supports Liquid syntax — use the Liquid Variable Explorer to build dynamic names. |
Get Datadog Graph Snapshot
Use this action to capture a point-in-time graph from Datadog and attach it to the incident. This is useful for preserving the state of a metric at the time an incident was declared or escalated.Add the action
In your workflow, click Add Action, search for Datadog, and select Get Datadog Graph Snapshot.
Configure the action
| Field | Required | Description |
|---|---|---|
| Metric Query | Yes | The Datadog metric query to snapshot — for example avg:system.cpu.user with an optional scope filter. |
| Start | No | Snapshot start time in Unix epoch seconds. Supports Liquid syntax. |
| End | No | Snapshot end time in Unix epoch seconds. Defaults to the current time if blank. |
Get Datadog Dashboard
Use this action to retrieve a Datadog dashboard and surface its URL in the incident timeline. This gives responders quick access to the relevant monitoring view without leaving Rootly.Add the action
In your workflow, click Add Action, search for Datadog, and select Get Datadog Dashboard.
Alert Workflows
In addition to incident workflow actions, you can build Alert workflows in Rootly that trigger automatically when a Datadog alert arrives. These are separate from incident workflows and configured under Workflows → Alert. Common patterns:- Auto-create an incident when a SEV-1 Datadog alert fires
- Page on-call for alerts with
alert_priorityofP1orP2 - Send a Slack message to a channel when a monitor transitions to
ALERT - Resolve the alert automatically when Datadog sends a
RECOVERYtransition
alert_priority, alert_title, or alert_transition. See the Alerts page for a full walkthrough.
Frequently Asked Questions
The Create Notebook action ran but no notebook appeared in Datadog
The Create Notebook action ran but no notebook appeared in Datadog
Check the workflow run log in Rootly for error details. Confirm the Datadog Application Key has sufficient permissions and that the integration is still connected under Configuration → Integrations.
Can I chain Datadog actions with other workflow steps?
Can I chain Datadog actions with other workflow steps?
Yes. Datadog actions can be combined with any other Rootly workflow actions in the same workflow — for example, create a Datadog notebook and then send a Slack message with the notebook link.
What Liquid variables can I use in notebook names or metric queries?
What Liquid variables can I use in notebook names or metric queries?
Any incident Liquid variable is supported. Use the Liquid Variable Explorer to browse available variables and preview their values.