Skip to main content
Connect Datadog to give Tero context and enable actions directly in your account.

Connect

Select your Datadog region, then follow the steps.
1

Run tero

Open your terminal and run:
tero
This opens the Tero TUI, which guides you through setup.
Don't have the CLI installed? See the quickstart.
2

Log in to Tero

The TUI opens your browser to create an account or log in. Complete the flow in your browser, then confirm the code shown in your terminal. The TUI logs you in automatically.
3

Select Datadog

The TUI asks which integration you want to connect. Select Datadog.
4

Select your region

Pick your Datadog region. Select US1.
5

Create an API key

The TUI asks for an API key. Datadog uses this to authenticate requests.In Datadog, go to Organization Settings → API Keys. Click New Key, name it "Tero", and paste the key into the TUI.
6

Create a service account

The TUI asks for an application key. This controls what Tero can access.We recommend creating a service account instead of using your personal account. This keeps Tero's access separate and makes it easier to manage permissions.In Datadog, go to Organization Settings → Service Accounts. Click New Service Account and name it "Tero".Assign a role to the service account. Standard gives Tero full functionality — it can analyze your data and take action directly in Datadog. Read-Only works too, but you'll need to take action through Edge or code changes instead.See Roles for details on what each role enables.
7

Create an application key

After creating the service account, click on it in the list. Under Application Keys, click New Key. Copy the key and paste it into the TUI.
8

Done

Tero validates your credentials and starts analyzing your environment. You'll see a progress bar — analysis usually takes a couple of minutes, even with billions of logs.Once it's done, you're ready to ask your first question.

Context

When you connect Datadog, Tero adds to your context graph. Your logs, metrics, traces, and services become connected and understood.

Actions

With write access, Tero can take action directly in Datadog:
Tero configuring Datadog
These are Datadog-specific. You can always take action other ways — deploy policies to your infrastructure with Edge, adjust instrumentation in your code, or configure Datadog manually. See Taking action for all options.

Permissions

Datadog has three managed roles. Pick one when creating your service account.
RoleWhat it gives Tero
StandardFull context and actions
Read-OnlyContext only — you take action elsewhere
CustomYou decide — see below

Custom role permissions

Create a custom role if you need fine-grained control.
PermissionWhat Tero can do
logs_read_dataRead your logs
logs_read_index_dataRead index configuration
metrics_readRead your metrics
apm_readRead your traces
service_catalog_readRead your services
dashboards_readRead your dashboards
monitors_readRead your monitors
usage_readRead usage data
billing_readRead billing data
PermissionWhat Tero can do
logs_write_exclusion_filtersConfigure exclusion filters
logs_write_pipelinesModify pipelines
apm_generate_metricsCreate trace-based metrics
Start minimal and add permissions later. Update the service account’s role in Datadog and Tero picks up the changes automatically.