Quick Answer
The Datadog ServiceNow integration enables IT and operations teams to automatically create and update ServiceNow incident tickets whenever Datadog detects critical infrastructure alerts or application anomalies. It connects via a Native Integration and is designed for B2B engineering and IT service management teams looking to streamline incident response workflows.
Comparison Table
| Feature / Attribute | Datadog | ServiceNow |
|---|---|---|
| Category | Cloud Monitoring | IT Service Management |
| Starting Price | $15 per host/month, billed annually (Infrastructure Pro plan) | $100 per user/month, estimated enterprise tier annual subscription |
| Core Features | Infrastructure metrics tracking, Log management analytics, Application performance monitoring, Synthetic web testing, Real time alerting | Incident management workflow, Asset discovery engine, Change management automation, Service catalog portal, Knowledge base builder |
| Role in This Integration | Detects critical infrastructure alerts and application anomalies in real time. | Receives alert payloads to automatically create and update incident tickets. |
Why Implement the Datadog ServiceNow Integration
Connecting your cloud monitoring stack with your IT service management workflow eliminates manual ticket creation during high-stress operational events. The primary use case for this connection is to automatically create and update ServiceNow incident tickets whenever Datadog detects critical infrastructure alerts or application anomalies. By bridging these two platforms, on-call engineers and IT service desks reduce mean time to resolution (MTTR), ensure no alerts slip through the cracks, and maintain a complete audit trail of infrastructure health within their central ITSM environment.
Step-by-step Setup Guide
Step 1: Review Prerequisites and Permissions
Ensure you have administrator access on both Datadog and ServiceNow before starting. You will need administrator access within Datadog to manage integrations and API configurations, alongside an appropriate integration user role or admin permissions in ServiceNow to handle inbound incident creation and API endpoints.
Step 2: Establish the Connection via Native Integration
Navigate to the integrations marketplace within your Datadog dashboard and locate ServiceNow. Follow the setup wizard to configure the connection using a Native Integration. You will typically be prompted to supply your ServiceNow instance URL, along with appropriate authentication credentials or API tokens to allow Datadog securely communicate with your ServiceNow environment.
Step 3: Configure Field and Data Mapping
Define how data payloads from Datadog translate into ServiceNow incident fields. Map critical parameters such as alert severity, monitor title, metric tags, and anomaly descriptions to standard ServiceNow incident fields like priority, short description, category, and assignment group. This ensures that every ticket generated provides actionable context to your IT service desk.
Step 4: Test the Integration
Trigger a test alert or use Datadog's test notification feature to verify that data flows correctly between the two systems. Check your ServiceNow incident management dashboard to confirm that the test event successfully generates a properly formatted ticket with all mapped fields populated accurately.
Step 5: Go Live and Monitor Workflows
Once testing is successful, enable the integration for your production monitors and alert rules. Monitor the initial wave of automatically generated tickets closely to ensure alert thresholds are tuned properly and that ServiceNow routing rules direct the incoming tickets to the correct teams without creating alert fatigue.
Common Troubleshooting Issues
Missing tickets in ServiceNow
- Symptom: Datadog fires critical alerts, but no corresponding incident tickets appear in ServiceNow.
- Likely Cause: Authentication credentials or API tokens between Datadog and ServiceNow may have expired or lack the required permissions.
- Fix: Verify and re-enter your ServiceNow instance credentials within the Datadog integration settings, ensuring the designated user account has permissions to create incidents.
Incorrect priority mapping on tickets
- Symptom: High-severity Datadog infrastructure alerts are generating low-priority tickets in ServiceNow.
- Likely Cause: The alert severity translation rules or field mapping configurations are misaligned between the two tools.
- Fix: Review your integration field mapping settings in Datadog and update the severity mapping logic to correspond correctly with ServiceNow priority tiers.
Duplicate tickets for single events
- Symptom: A single Datadog anomaly triggers multiple duplicate ServiceNow incident tickets for the same underlying issue.
- Likely Cause: Monitor re-notification settings in Datadog are improperly configured, or recovery alerts are not mapped to close tickets.
- Fix: Adjust your Datadog alert notification frequency and ensure that recovery events are configured to update or resolve the corresponding ServiceNow ticket instead of opening new ones.
Authentication errors during connection
- Symptom: The Datadog integration setup wizard throws an authorization error when attempting to link to ServiceNow.
- Likely Cause: The ServiceNow instance URL is mistyped, or inbound REST API traffic is blocked by firewall rules or access control lists (ACLs).
- Fix: Double-check the formatting of your ServiceNow instance URL and confirm that your ServiceNow instance allows API requests from Datadog's known IP ranges.
Frequently Asked Questions
Does Datadog integrate natively with ServiceNow?
Yes, the platform utilizes a Native Integration to link monitoring data directly to your ITSM workflows. This connection allows teams to establish automated pathways for alert handling without relying on custom-built middleware or third-party automation tools.
What triggers a ServiceNow incident ticket from Datadog?
Tickets are automatically generated whenever Datadog detects critical infrastructure alerts or application anomalies based on the monitor thresholds you configure. You can customize which specific severity levels or monitor tags are eligible to trigger an outbound ticket.
Can the integration update existing ServiceNow tickets when issues resolve?
Yes, the integration supports bi-directional updates depending on your configuration. When a monitored metric returns to a healthy state or an alert clears in Datadog, it can automatically update the status of the corresponding ServiceNow incident.
Do I need developer resources to set up this integration?
No dedicated software development is required because the setup relies on a pre-built Native Integration. However, familiarity with your organization's ServiceNow incident categorization and user group structure is helpful during the field mapping stage.
How does pricing work for Datadog and ServiceNow?
Datadog starts at $15 per host/month, billed annually (Infrastructure Pro plan), while ServiceNow starts at $100 per user/month, estimated enterprise tier annual subscription. Your total cost will depend on your specific tier, the number of monitored hosts, and your user seat count.
What happens to my incident data if the connection drops temporarily?
If a temporary network interruption occurs, Datadog will typically retry delivery depending on the alert queue configuration. It is best practice to review your integration logs periodically to catch and resolve any temporary communication failures quickly.
Ready to Connect Datadog and ServiceNow?
Ready to streamline your incident response and connect your monitoring data directly to your IT service desk? Get started by exploring the platforms below:
- Try Datadog
- Try ServiceNow
Disclosure: CoreStackGuide may earn a commission if you sign up through these links, at no extra cost to you.