Datadog Integration

Ingest Scamalytics IP reputation scores directly into your Datadog SIEM. Enable Custom Signals that alert on high-risk IPs and visualize threats with our Native Dashboard.

Get API Key & Deploy →

Install the Integration

Run the specific agent command to fetch the `scamalytics_ti` package from the Datadog marketplace.

sudo datadog-agent integration install -t datadog-scamalytics_ti==1.0.0 -r

& "$env:ProgramFiles\Datadog\Datadog Agent\bin\agent.exe" integration install -t datadog-scamalytics_ti==1.0.0

datadog-agent integration install -t datadog-scamalytics_ti==1.0.0

Note: Please ensure your endpoint already has the Datadog-Agent installed.

Configure the YAML

Locate your configuration directory. Create or edit your values into the file below: /etc/datadog-agent/conf.d/scamalytics.d/conf.yaml C:\ProgramData\Datadog\conf.d\scamalytics.d\conf.yaml ~/.datadog-agent/conf.d/scamalytics.d/conf.yaml

init_config:

instances:
  - dd_api_key: "datadog-api-key"
    dd_app_key: "datadog-app-key"
    scamalytics_api_key: "api-key"
    customer_id: "customer-id"
    scamalytics_api_url: "https://api-ti-us.scamalytics.com/{package}/?ip="
    dd_site: "datadoghq.com"
    skip_window_hours: 24

logs:
  - type: integration
    source: scamalytics
    service: scamalytics

Restart the Agent

Apply the changes by restarting your Datadog agent service to visualize the Dashboard.

sudo systemctl restart datadog-agent

Restart-Service -Name "DatadogAgent"

launchctl stop com.datadoghq.agent && launchctl start com.datadoghq.agent