Integrate Contrast Security ADR with Datadog®

The Contrast Security ADR integration with Datadog enables ADR to send incident details to your Security Information and Event Management (SIEM), Security for Orchestration, Automation and Response (SOAR), and Extended Detection and Response (XDR) environments, which contextualizes incidents with other threat detection and response solutions.

How it works

When configured, the Contrast Security ADR sends detected attack events from the Contrast Security platform to your Datadog instance over HTTPs.

The ContrastSecurity ADR with Datadog application enables Datadog to:

Parse and normalize the data received over HTTPs from the Datadog Logs API
Display Contrast Security ADR attack events in Datadog to populate the dedicated Contrast Security ADR Dashboard, or to use with search and correlation rules in Datadog Cloud SIEM

Before you begin

Before you start, you must have:

Admin Role permissions in Datadog
Applications instrumented with a Contrast agent

Install the Contrast Security ADR application in Datadog

In Datadog, go to the Contrast variables: Contrast Classic ADR tile and select Install Integration.
Continue to Set up the Datadog log ingestion.

Set up the Datadog log ingestion

In Datadog, go to Datadog Organization Settings > API Keys here to create a new API Key for the integration.
Once created, select Copy Key to copy it to your clipboard, since it will be needed in the following configuration step.

Configure Contrast Security ADR to send attack events to Datadog

Configure the integration in Contrast to send attack events to the Datadog application.

In Contrast, go to the user menu and select Organization settings > Integrations.
Select the Datadog option under the ADR Integrations section.
Under the Datadog fields, enter:
- The URL is https://http-intake.logs.datadoghq.com/api/v2/logs
- The API Key from the API token created in Set up the Datadog log ingestion
Select Save.
Continue to View Contrast ADR data in Datadog.

View Contrast ADR data in the Datadog dashboard

The integration includes a Datadog Dashboard titled Contrast Security ADR.