--- title: 모니터 생성하기 description: 지정된 옵션을 사용하여 모니터를 생성합니다. breadcrumbs: 문서 > API > 모니터 생성하기 --- > For the complete documentation index, see [llms.txt](https://dnd37xeb23o8n.cloudfront.net/jen.gilbert/astro-base/llms.txt). # 모니터 생성하기 ## v1 (latest) | Datadog site | API endpoint | | ----------------- | ------------------------------------------------- | | app.datadoghq.com | POST https://api.datadoghq.com/api/v1/monitor | | us3.datadoghq.com | POST https://api.us3.datadoghq.com/api/v1/monitor | | us5.datadoghq.com | POST https://api.us5.datadoghq.com/api/v1/monitor | | app.datadoghq.eu | POST https://api.datadoghq.eu/api/v1/monitor | | ap1.datadoghq.com | POST https://api.ap1.datadoghq.com/api/v1/monitor | | ap2.datadoghq.com | POST https://api.ap2.datadoghq.com/api/v1/monitor | | uk1.datadoghq.com | POST https://api.uk1.datadoghq.com/api/v1/monitor | | app.ddog-gov.com | POST https://api.ddog-gov.com/api/v1/monitor | | us2.ddog-gov.com | POST https://api.us2.ddog-gov.com/api/v1/monitor | ### Overview 지정된 옵션을 사용하여 모니터를 생성합니다. #### 모니터 유형 다음 중에서 선택한 모니터 유형입니다. - anomaly: `query alert` - APM: `query alert` 또는 `trace-analytics alert` - composite: `composite` - custom: `service check` - forecast: `query alert` - host: `service check` - integration: `query alert` 또는 `service check` - live process: `process alert` - logs: `log alert` - metric: `query alert` - network: `service check` - outlier: `query alert` - process: `service check` - rum: `rum alert` - SLO: `slo alert` - watchdog: `event-v2 alert` - event-v2: `event-v2 alert` - audit: `audit alert` - error-tracking: `error-tracking alert` - database-monitoring: `database-monitoring alert` - network-performance: `network-performance alert` - cloud cost: `cost alert` - network-path: `network-path alert` **참고**: - Synthetic 모니터는 Synthetics API를 통해 생성됩니다. 자세한 내용은 [Synthetics API](https://docs.datadoghq.com/api/latest/synthetics.md) 설명서를 참조하세요. - 로그 모니터에는 범위가 지정되지 않은 App Key가 필요합니다. #### 쿼리 유형 ##### 메트릭 경보 쿼리 예: `time_aggr(time_window):space_aggr:metric{tags} [by {key}] operator #` - `time_aggr`: avg, sum, max, min, change 또는 pct_change - `time_window`: `last_#m`(모니터 유형에 따라 `#`은 1에서 10080 사이), `last_#h`(모니터 유형에 따라 `#`은 1에서 168 사이), `last_1d` 또는 `last_1w` - `space_aggr`: avg, sum, min 또는 max - `tags`: 하나 이상의 태그(쉼표로 구분) 또는 * - `key`: key:value 태그 구문의 'key', 그룹 내 각 태그에 대해 별도의 경보를 정의함(다중 경보) - `operator`: <, <=, >, >=, == 또는 != - `#`: 임계값을 설정하는 데 사용되는 정수 또는 십진수 수식 쿼리가 있는 메트릭 모니터에서 동적 임계값을 사용하려면 `#`을 `threshold` 키워드 (예: `... > threshold`)로 교체하고 `options.thresholds`의 `critical_query`를 통해 쿼리로 임계값을 제공하세요. 이 기능은 미리 보기로 제공되고 있습니다. `_change_` 또는 `_pct_change_` 시간 애그리게이터를 사용하는 경우 대신 다음과 함께 `change_aggr(time_aggr(time_window), timeshift):space_aggr:metric{tags} [by {key}] operator #`을 사용하세요. - `change_aggr` change, pct_change - `time_aggr` avg, sum, max, min [자세히 알아보기](https://docs.datadoghq.com/monitors/create/types.md#define-the-conditions) - `time_window` last\_#m(모니터 유형에 따라 1\~2880), last\_#h(모니터 유형에 따라 1~48) 또는 last_#d(1 또는 2) - `timeshift` #m_ago (5, 10, 15, 30), #h_ago (1, 2, 4), 또는 1d_ago 이 항목을 사용하여 다음 쿼리로 이상치 모니터를 생성합니다. `avg(last_30m):outliers(avg:system.cpu.user{role:es-events-data} by {host}, 'dbscan', 7) > 0` ##### 서비스 검사 쿼리 예: `"check".over(tags).last(count).by(group).count_by_status()` - `check` 검사 이름(예: `datadog.agent.up`) - `tags` 하나 이상의 따옴표로 묶인 태그(쉼표로 구분), 또는 "*" (예: `.over("env:prod", "role:db")`), `over`는 비워둘 수 없습니다. - `count`는 최대 임계값(`options`에 정의됨)보다 크거나 같아야 합니다. 이 값은 100으로 제한됩니다. 예를 들어, 1개의 critical, 3개의 ok, 2개의 warn 상태를 지정한 경우 `count`는 최소 3이어야 합니다. - `group`은 검사 모니터에 대해 지정해야 합니다. 검사별 그룹화는 일부 서비스 검사에 대해 이미 명시적으로 알려져 있습니다. 예를 들어, Postgres 통합 모니터는 `db`, `host`, `port`로 태그가 지정되고, 네트워크 모니터는 `host`, `instance`, `url`로 태그가 지정됩니다. 자세한 내용은 [서비스 검사](https://docs.datadoghq.com/api/latest/service-checks.md) 설명서를 참조하세요. ##### 이벤트 경보 쿼리 **참고:** 이벤트 경보 쿼리는 이벤트 V2 경보 쿼리로 대체되었습니다. 자세한 내용은 [이벤트 마이그레이션 가이드](https://docs.datadoghq.com/service_management/events/guides/migrating_to_new_events_features.md)를 참조하세요. ##### 이벤트 V2 경보 쿼리 예: `events(query).rollup(rollup_method[, measure]).last(time_window) operator #` - `query` 검색 쿼리, [로그 검색 구문](https://docs.datadoghq.com/logs/search_syntax.md)을 따릅니다. - `rollup_method` 통계 롤업 메서드, `count`, `avg` 및 `cardinality`를 지원합니다. - `measure` `avg` 및 카디널리티 `rollup_method` 대상, 사용할 측정값 또는 패싯 이름을 지정합니다. - `time_window` #m(1에서 2880 사이), #h(1에서 48 사이)입니다. - `operator` `<`, `<=`, `>`, `>=`, `==` 또는 `!=`입니다. - `#` 임계값을 설정하는 데 사용되는 정수 또는 십진수입니다. ##### 프로세스 경보 쿼리 예: `processes(search).over(tags).rollup('count').last(timeframe) operator #` - `search` 프로세스를 쿼리하기 위한 자유 텍스트 검색 문자열입니다. 일치하는 프로세스는 [Live Processes](https://docs.datadoghq.com/infrastructure/process.md?tab=linuxwindows) 페이지의 결과와 일치합니다. - `tags` 하나 이상의 태그(쉼표로 구분) - `timeframe` 개수를 롤업할 타임프레임 (예: 10m, 4h) 지원되는 타임프레임: s, m, h, d - `operator` <, <=, >, >=, == 또는 != - `#` 임계값을 설정하는 데 사용되는 정수 또는 십진수 ##### 로그 경보 쿼리 예: `logs(query).index(index_name).rollup(rollup_method[, measure]).last(time_window) operator #` - `query` 검색 쿼리, [로그 검색 구문](https://docs.datadoghq.com/logs/search_syntax.md)을 따릅니다. - `index_name` 다중 인덱스 조직의 경우, 요청이 수행되는 로그 인덱스입니다. - `rollup_method` 통계 롤업 메서드, `count`, `avg` 및 `cardinality`를 지원합니다. - `measure` `avg` 및 카디널리티 `rollup_method` 대상, 사용할 측정값 또는 패싯 이름을 지정합니다. - `time_window` #m(1에서 2880 사이), #h(1에서 48 사이)입니다. - `operator` `<`, `<=`, `>`, `>=`, `==` 또는 `!=`입니다. - `#` 임계값을 설정하는 데 사용되는 정수 또는 십진수입니다. ##### 복합 조건 쿼리 예: `12345 && 67890`(`12345`와 `67890`은 복합 조건이 아닌 모니터의 ID) * `name` [*필수*, *기본값* = **동적, 쿼리 기반**]: 경보의 이름입니다. * `message` [*필수*, *기본값* = **동적, 쿼리 기반**]: 이 모니터에 대한 알림에 포함할 메시지입니다. 이메일 알림은 이벤트와 동일한 '@username' 표기법을 사용하여 특정 사용자에게 보낼 수 있습니다. * `tags` [*선택 사항*, *기본값* = **빈 목록**]: 모니터와 연결할 태그 목록입니다. API를 통해 모든 모니터 세부 정보를 가져올 때 `monitor_tags` 인수를 사용하여 이러한 태그별로 결과를 필터링하세요. API를 통해서만 사용할 수 있으며 Datadog UI에서는 표시하거나 편집할 수 없습니다. ##### SLO 경보 쿼리 예시: `error_budget("slo_id").over("time_window") operator #` - `slo_id`: 경보를 구성하려는 SLO의 영숫자 SLO ID입니다. - `time_window`: 경보를 보낼 SLO 대상의 시간 범위입니다. 유효한 옵션: `7d`, `30d`, `90d`. - `operator`: `>=` or `>` ##### 감사 경보 쿼리 예: `audits(query).rollup(rollup_method[, measure]).last(time_window) operator #` - `query` 검색 쿼리, [로그 검색 구문](https://docs.datadoghq.com/logs/search_syntax.md)을 따릅니다. - `rollup_method` 통계 롤업 메서드, `count`, `avg` 및 `cardinality`를 지원합니다. - `measure` `avg` 및 카디널리티 `rollup_method` 대상, 사용할 측정값 또는 패싯 이름을 지정합니다. - `time_window` #m(1에서 2880 사이), #h(1에서 48 사이)입니다. - `operator` `<`, `<=`, `>`, `>=`, `==` 또는 `!=`입니다. - `#` 임계값을 설정하는 데 사용되는 정수 또는 십진수입니다. ##### CI Pipelines 경보 쿼리 예: `ci-pipelines(query).rollup(rollup_method[, measure]).last(time_window) operator #` - `query` 검색 쿼리, [로그 검색 구문](https://docs.datadoghq.com/logs/search_syntax.md)을 따릅니다. - `rollup_method` 통계 롤업 메서드, `count`, `avg`, `cardinality`를 지원합니다. - `measure` `avg` 및 카디널리티 `rollup_method` 대상, 사용할 측정값 또는 패싯 이름을 지정합니다. - `time_window` #m(1에서 2880 사이), #h(1에서 48 사이)입니다. - `operator` `<`, `<=`, `>`, `>=`, `==` 또는 `!=`입니다. - `#` 임계값을 설정하는 데 사용되는 정수 또는 십진수입니다. ##### CI Tests 경보 쿼리 예: `ci-tests(query).rollup(rollup_method[, measure]).last(time_window) operator #` - `query` 검색 쿼리, [로그 검색 구문](https://docs.datadoghq.com/logs/search_syntax.md)을 따릅니다. - `rollup_method` 통계 롤업 메서드, `count`, `avg`, `cardinality`를 지원합니다. - `measure` `avg` 및 카디널리티 `rollup_method` 대상, 사용할 측정값 또는 패싯 이름을 지정합니다. - `time_window` #m(1에서 2880 사이), #h(1에서 48 사이)입니다. - `operator` `<`, `<=`, `>`, `>=`, `==` 또는 `!=`입니다. - `#` 임계값을 설정하는 데 사용되는 정수 또는 십진수입니다. ##### Error Tracking 경보 쿼리 "새로운 이슈" 예: `error-tracking(query).source(issue_source).new().rollup(rollup_method[, measure]).by(group_by).last(time_window) operator #` "영향이 큰 이슈" 예: `error-tracking(query).source(issue_source).impact().rollup(rollup_method[, measure]).by(group_by).last(time_window) operator #` - `query` 검색 쿼리, [로그 검색 구문](https://docs.datadoghq.com/logs/search_syntax.md)을 따릅니다. - `issue_source` 이슈 소스, `all`, `browser`, `mobile`, `backend`를 지원하며 생략 시 기본값은 `all`입니다. - `rollup_method` 통계 롤업 메서드, `count`, `avg`, `cardinality`를 지원하며 생략 시 기본값은 `count`입니다. - `measure` `avg` 및 카디널리티 `rollup_method` 대상, 사용할 측정값 또는 패싯 이름을 지정합니다. - `group by` 그룹화할 속성의 쉼표로 구분된 목록, 최소한 `issue.id`를 포함해야 합니다. - `time_window` #m(1에서 2880 사이), #h(1에서 48 사이)입니다. - `operator` `<`, `<=`, `>`, `>=`, `==` 또는 `!=`입니다. - `#` 임계값을 설정하는 데 사용되는 정수 또는 십진수입니다. **Database Monitoring 경보 쿼리** 예: `database-monitoring(query).rollup(rollup_method[, measure]).last(time_window) operator #` - `query` 검색 쿼리, [로그 검색 구문](https://docs.datadoghq.com/logs/search_syntax.md)을 따릅니다. - `rollup_method` 통계 롤업 메서드, `count`, `avg`, `cardinality`를 지원합니다. - `measure` `avg` 및 카디널리티 `rollup_method` 대상, 사용할 측정값 또는 패싯 이름을 지정합니다. - `time_window` #m(1에서 2880 사이), #h(1에서 48 사이)입니다. - `operator` `<`, `<=`, `>`, `>=`, `==` 또는 `!=`입니다. - `#` 임계값을 설정하는 데 사용되는 정수 또는 십진수입니다. **네트워크 성능 경보 쿼리** 예: `network-performance(query).rollup(rollup_method[, measure]).last(time_window) operator #` - `query` 검색 쿼리, [로그 검색 구문](https://docs.datadoghq.com/logs/search_syntax.md)을 따릅니다. - `rollup_method` 통계 롤업 메서드, `count`, `avg`, `cardinality`를 지원합니다. - `measure` `avg` 및 카디널리티 `rollup_method` 대상, 사용할 측정값 또는 패싯 이름을 지정합니다. - `time_window` #m(1에서 2880 사이), #h(1에서 48 사이)입니다. - `operator` `<`, `<=`, `>`, `>=`, `==` 또는 `!=`입니다. - `#` 임계값을 설정하는 데 사용되는 정수 또는 십진수입니다. **비용 경보 쿼리** 예: `formula(query).timeframe_type(time_window).function(parameter) operator #` - `query` 검색 쿼리, [로그 검색 구문](https://docs.datadoghq.com/logs/search_syntax.md)을 따릅니다. - `timeframe_type` 비용을 평가할 타임프레임 유형 - `forecast`의 경우 `current`를 지원합니다. - `change`, `anomaly`, `threshold`의 경우 `last`를 지원합니다. - `time_window` - 일일 롤업을 지원합니다(예: `7d`). - `function` - [선택 사항, 생략 시 기본값은 `threshold` 모니터] `change`, `anomaly`, `forecast`를 지원합니다. - `parameter` 해당 유형의 파라미터를 지정합니다. - `change`의 경우 - `relative`, `absolute`를 지원합니다. - [선택 사항] `#`을 지원하며, 여기서 `#`은 임계값을 설정하는 데 사용되는 정수 또는 십진수입니다. - `anomaly`의 경우 - `direction=both`, `direction=above`, `direction=below`를 지원합니다. - [선택 사항] `threshold=#`을 지원하며, 여기서 `#`은 임계값을 설정하는 데 사용되는 정수 또는 십진수입니다. - `operator` - `threshold`의 경우 `<`, `<=`, `>`, `>=`, `==` 또는 `!=`를 지원합니다. - `change`의 경우 `>`, `<`를 지원합니다. - `anomaly`의 경우 `>=`를 지원합니다. - `forecast`의 경우 `>`를 지원합니다. - `#` 임계값을 설정하는 데 사용되는 정수 또는 십진수입니다. **Network Path 경보 쿼리** 예 `network-path(query).index(index_name).rollup(rollup_method[, measure]).last(time_window) operator #` - `query` 검색 쿼리, [로그 검색 구문](https://docs.datadoghq.com/logs/search_syntax.md)을 따릅니다. - `index_name` 모니터링할 데이터 유형으로, `netpath-path` 및 `netpath-hop`을 지원합니다. - `rollup_method` 통계 롤업 메서드, `count`, `avg`, `cardinality`를 지원합니다. - `measure` `avg` 및 카디널리티 `rollup_method` 대상, 사용할 측정값 또는 패싯 이름을 지정합니다. - `time_window` #m(1에서 2880 사이), #h(1에서 48 사이)입니다. - `operator` `<`, `<=`, `>`, `>=`, `==` 또는 `!=`입니다. - `#` 임계값을 설정하는 데 사용되는 정수 또는 십진수입니다. This endpoint requires any of the following permissions: - `monitors_write` - `monitors_draft_write` OAuth apps require one of the following authorization [scopes](https://dnd37xeb23o8n.cloudfront.net/jen.gilbert/astro-base/ko/api/latest/scopes.md#monitors) to access this endpoint: `monitors_write`, `monitors_draft_write`. ### Request #### Body Data (required) 모니터 요청 본문을 생성합니다. {% tabs %} {% tab label="Model" %} | Parent field | Field | Type | Description | | ----------------------------- | ------------------------------ | --------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | | assets | [object] | 모니터를 설명하는 객체입니다. | | assets | category [*required*] | enum | Indicates the type of asset this entity represents on a monitor. Allowed enum values: `runbook`. | | assets | name [*required*] | string | Name for the monitor asset | | assets | resource_key | string | Represents the identifier of the internal Datadog resource that this asset represents. IDs in this field should be passed in as strings. | | assets | resource_type | enum | Type of internal Datadog resource associated with a monitor asset. Allowed enum values: `notebook`. | | assets | url [*required*] | string | URL link for the asset. For links with an internal resource type set, this should be the relative path to where the Datadog domain is appended internally. For external links, this should be the full URL path. | | | draft_status | enum | Indicates whether the monitor is in a draft or published state. `draft`: The monitor appears as Draft and does not send notifications. `published`: The monitor is active and evaluates conditions and notify as configured. This field is in preview. The draft value is only available to customers with the feature enabled. Allowed enum values: `draft`, `published`. Default: `published`. | | | matching_downtimes | [object] | A list of active v1 downtimes that match this monitor. | | matching_downtimes | end | int64 | POSIX timestamp to end the downtime. | | matching_downtimes | scope | [string] | The scope(s) to which the downtime applies. Must be in `key:value` format. For example, `host:app2`. Provide multiple scopes as a comma-separated list like `env:dev,env:prod`. The resulting downtime applies to sources that matches ALL provided scopes (`env:dev` **AND** `env:prod`). | | matching_downtimes | start | int64 | POSIX timestamp to start the downtime. | | | message | string | A message to include with notifications for this monitor. | | | name | string | The monitor name. | | | options | object | List of options associated with your monitor. | | options | enable_logs_sample | boolean | Whether or not to send a log sample when the log monitor triggers. | | options | enable_samples | boolean | Whether or not to send a list of samples when the monitor triggers. This is only used by CI Test and Pipeline monitors. | | options | escalation_message | string | We recommend using the [is_renotify](https://docs.datadoghq.com/monitors/notify.md?tab=is_alert#renotify), block in the original message instead. A message to include with a re-notification. Supports the `@username` notification we allow elsewhere. Not applicable if `renotify_interval` is `None`. | | options | evaluation_delay | int64 | Time (in seconds) to delay evaluation, as a non-negative integer. For example, if the value is set to `300` (5min), the timeframe is set to `last_5m` and the time is 7:00, the monitor evaluates data from 6:50 to 6:55. This is useful for AWS CloudWatch and other backfilled metrics to ensure the monitor always has data during evaluation. | | options | group_retention_duration | string | The time span after which groups with missing data are dropped from the monitor state. The minimum value is one hour, and the maximum value is 72 hours. Example values are: "60m", "1h", and "2d". This option is only available for APM Trace Analytics, Audit Trail, CI, Error Tracking, Event, Logs, and RUM monitors. | | options | groupby_simple_monitor | boolean | **DEPRECATED**: Whether the log alert monitor triggers a single alert or multiple alerts when any group breaches a threshold. Use `notify_by` instead. | | options | include_tags | boolean | A Boolean indicating whether notifications from this monitor automatically inserts its triggering tags into the title. **Examples** - If `True`, `[Triggered on {host:h1}] Monitor Title` - If `False`, `[Triggered] Monitor Title` Default: `true`. | | options | locked | boolean | **DEPRECATED**: Whether or not the monitor is locked (only editable by creator and admins). Use `restricted_roles` instead. | | options | min_failure_duration | int64 | How long the test should be in failure before alerting (integer, number of seconds, max 7200). Default: `0`. | | options | min_location_failed | int64 | The minimum number of locations in failure at the same time during at least one moment in the `min_failure_duration` period (`min_location_failed` and `min_failure_duration` are part of the advanced alerting rules - integer, >= 1). Default: `1`. | | options | new_group_delay | int64 | Time (in seconds) to skip evaluations for new groups. For example, this option can be used to skip evaluations for new hosts while they initialize. Must be a non negative integer. | | options | new_host_delay | int64 | **DEPRECATED**: Time (in seconds) to allow a host to boot and applications to fully start before starting the evaluation of monitor results. Should be a non negative integer. Use new_group_delay instead. Default: `300`. | | options | no_data_timeframe | int64 | The number of minutes before a monitor notifies after data stops reporting. Datadog recommends at least 2x the monitor timeframe for query alerts or 2 minutes for service checks. If omitted, 2x the evaluation timeframe is used for query alerts, and 24 hours is used for service checks. | | options | notification_preset_name | enum | Toggles the display of additional content sent in the monitor notification. Allowed enum values: `show_all`, `hide_query`, `hide_handles`, `hide_all`, `hide_query_and_handles`, `show_only_snapshot`, `hide_handles_and_footer`. Default: `show_all`. | | options | notify_audit | boolean | A Boolean indicating whether tagged users is notified on changes to this monitor. Default: `false`. | | options | notify_by | [string] | Controls what granularity a monitor alerts on. Only available for monitors with groupings. For instance, a monitor grouped by `cluster`, `namespace`, and `pod` can be configured to only notify on each new `cluster` violating the alert conditions by setting `notify_by` to `["cluster"]`. Tags mentioned in `notify_by` must be a subset of the grouping tags in the query. For example, a query grouped by `cluster` and `namespace` cannot notify on `region`. Setting `notify_by` to `["*"]` configures the monitor to notify as a simple-alert. | | options | notify_no_data | boolean | A Boolean indicating whether this monitor notifies when data stops reporting. Defaults to `false`. | | options | on_missing_data | enum | Controls how groups or monitors are treated if an evaluation does not return any data points. The default option results in different behavior depending on the monitor query type. For monitors using Count queries, an empty monitor evaluation is treated as 0 and is compared to the threshold conditions. For monitors using any query type other than Count, for example Gauge, Measure, or Rate, the monitor shows the last known status. This option is available for APM Trace Analytics, Audit Trail, CI, Error Tracking, Event, Logs, and RUM monitors. It is also required for metric monitors that use `scheduling_options.custom_schedule`. Allowed enum values: `default`, `show_no_data`, `show_and_notify_no_data`, `resolve`. | | options | renotify_interval | int64 | The number of minutes after the last notification before a monitor re-notifies on the current status. It only re-notifies if it’s not resolved. Default: `null`. | | options | renotify_occurrences | int64 | The number of times re-notification messages should be sent on the current status at the provided re-notification interval. | | options | renotify_statuses | [string] | The types of monitor statuses for which re-notification messages are sent. Default: **null** if `renotify_interval` is **null**. If `renotify_interval` is set, defaults to renotify on `Alert` and `No Data`. | | options | require_full_window | boolean | A Boolean indicating whether this monitor needs a full window of data before it’s evaluated. We highly recommend you set this to `false` for sparse metrics, otherwise some evaluations are skipped. Default is false. This setting only applies to metric monitors. | | options | scheduling_options | object | Configuration options for scheduling. | | scheduling_options | custom_schedule | object | Configuration options for the custom schedule. **This feature is in private beta.** | | custom_schedule | recurrences | [object] | Array of custom schedule recurrences. | | recurrences | rrule | string | Defines the recurrence rule (RRULE) for a given schedule. | | recurrences | start | string | Defines the start date and time of the recurring schedule. | | recurrences | timezone | string | Defines the timezone the schedule runs on. | | scheduling_options | evaluation_window | object | Configuration options for the evaluation window. If `hour_starts` is set, no other fields may be set. Otherwise, `day_starts` and `month_starts` must be set together. | | evaluation_window | day_starts | string | The time of the day at which a one day cumulative evaluation window starts. | | evaluation_window | hour_starts | int32 | The minute of the hour at which a one hour cumulative evaluation window starts. | | evaluation_window | month_starts | int32 | The day of the month at which a one month cumulative evaluation window starts. | | evaluation_window | timezone | string | The timezone of the time of the day of the cumulative evaluation window start. | | options | silenced | object | **DEPRECATED**: Information about the downtime applied to the monitor. Only shows v1 downtimes. | | additionalProperties | | int64 | UTC epoch timestamp in seconds when the downtime for the group expires. | | options | synthetics_check_id | string | **DEPRECATED**: ID of the corresponding Synthetic check. | | options | threshold_windows | object | Alerting time window options. | | threshold_windows | recovery_window | string | Describes how long an anomalous metric must be normal before the alert recovers. | | threshold_windows | trigger_window | string | Describes how long a metric must be anomalous before an alert triggers. | | options | thresholds | object | List of the different monitor threshold available. | | thresholds | critical | double | The monitor `CRITICAL` threshold. | | thresholds | critical_query | string | Query evaluated as a dynamic `CRITICAL` threshold. Only supported on metric monitors with a formula query and options['variables']. Cannot be combined with static thresholds. This field is in preview. | | thresholds | critical_recovery | double | The monitor `CRITICAL` recovery threshold. | | thresholds | critical_recovery_query | string | Query evaluated as a dynamic `CRITICAL` recovery threshold. Only supported on metric monitors with a formula query and options['variables']. Cannot be combined with static thresholds. This field is in preview. | | thresholds | ok | double | The monitor `OK` threshold. | | thresholds | unknown | double | The monitor UNKNOWN threshold. | | thresholds | warning | double | The monitor `WARNING` threshold. | | thresholds | warning_recovery | double | The monitor `WARNING` recovery threshold. | | options | timeout_h | int64 | The number of hours of the monitor not reporting data before it automatically resolves from a triggered state. The minimum allowed value is 0 hours. The maximum allowed value is 24 hours. Default: `null`. | | options | variables | [] | List of requests that can be used in the monitor query. **This feature is currently in beta.** | | variables | Object 1 | object | A formula and functions events query. | | Object 1 | compute [*required*] | object | Compute options. | | compute | aggregation [*required*] | enum | Aggregation methods for event platform queries. Allowed enum values: `count`, `cardinality`, `median`, `pc75`, `pc90`, `pc95`, `pc98`, `pc99`, `sum`, `min`, `max`, `avg`. | | compute | interval | int64 | A time interval in milliseconds. | | compute | metric | string | Measurable attribute to compute. | | compute | name | string | The name assigned to this aggregation, when multiple aggregations are defined for a query. | | compute | source | string | Source reference for composite query payloads. | | Object 1 | data_source [*required*] | enum | Data source for event platform-based queries. Allowed enum values: `rum`, `ci_pipelines`, `ci_tests`, `audit`, `events`, `logs`, `spans`, `database_queries`, `network`, `network_path`. | | Object 1 | group_by | [object] | Group by options. | | group_by | facet [*required*] | string | Event facet. | | group_by | limit | int64 | Number of groups to return. | | group_by | sort | object | Options for sorting group by results. | | sort | aggregation [*required*] | enum | Aggregation methods for event platform queries. Allowed enum values: `count`, `cardinality`, `median`, `pc75`, `pc90`, `pc95`, `pc98`, `pc99`, `sum`, `min`, `max`, `avg`. | | sort | metric | string | Metric used for sorting group by results. | | sort | order | enum | Direction of sort. Allowed enum values: `asc`, `desc`. Default: `desc`. | | group_by | source | string | Source reference for composite query payloads. | | Object 1 | indexes | [string] | An array of index names to query in the stream. Omit or use `[]` to query all indexes at once. | | Object 1 | name [*required*] | string | Name of the query for use in formulas. | | Object 1 | search | object | Search options. | | search | query [*required*] | string | Events search string. | | variables | Object 2 | object | A formula and functions cost query. | | Object 2 | aggregator | enum | Aggregation methods for metric queries. Allowed enum values: `avg`, `sum`, `max`, `min`, `last`, `area`, `l2norm`, `percentile`, `stddev`. | | Object 2 | data_source [*required*] | enum | Data source for cost queries. Allowed enum values: `metrics`, `cloud_cost`, `datadog_usage`. | | Object 2 | name [*required*] | string | Name of the query for use in formulas. | | Object 2 | query [*required*] | string | The monitor query. | | variables | Object 3 | object | A formula and functions data quality query. | | Object 3 | data_source [*required*] | enum | Data source for data quality queries. Allowed enum values: `data_quality_metrics`. | | Object 3 | filter [*required*] | string | Filter expression used to match on data entities. Uses Aastra query syntax. | | Object 3 | group_by | [string] | Optional grouping fields for aggregation. | | Object 3 | measure [*required*] | string | The data quality measure to query. Common values include: `bytes`, `cardinality`, `custom`, `freshness`, `max`, `mean`, `min`, `nullness`, `percent_negative`, `percent_zero`, `row_count`, `stddev`, `sum`, `uniqueness`. Additional values may be supported. | | Object 3 | monitor_options | object | Monitor configuration options for data quality queries. | | monitor_options | crontab_override | string | Crontab expression to override the default schedule. | | monitor_options | custom_sql | string | Custom SQL query for the monitor. | | monitor_options | custom_where | string | Custom WHERE clause for the query. | | monitor_options | group_by_columns | [string] | Columns to group results by. | | monitor_options | model_configuration | object | Tuning options for the anomaly detection model used by the monitor. | | model_configuration | auto_resolve_days | int32 | Number of days after which an open alert is automatically resolved. When unset, alerts stay open until the measure returns within bounds. | | model_configuration | enable_flatline_detection | boolean | Whether to alert when the measure stops changing entirely. Defaults to `true`. | | model_configuration | function | enum | Function applied to the measure before it is compared against the predicted bounds. Allowed enum values: `DIFF`, `DIFF_PERCENT`. | | model_configuration | min_lower_bound_size | double | Minimum distance between the predicted value and the lower bound. Widening the lower bound to at least this size suppresses alerts on small downward deviations. When unset, no minimum is enforced. | | model_configuration | min_upper_bound_size | double | Minimum distance between the predicted value and the upper bound. Widening the upper bound to at least this size suppresses alerts on small upward deviations. When unset, no minimum is enforced. | | model_configuration | model_bounds_override | enum | Restricts which predicted bound the monitor alerts on. `UPPER_ONLY` alerts only when the measure rises above the upper bound, `LOWER_ONLY` only when it falls below the lower bound. When unset, the monitor alerts on both. Allowed enum values: `UPPER_ONLY`, `LOWER_ONLY`. | | monitor_options | model_type_override | enum | Override for the model type used in anomaly detection. Allowed enum values: `freshness`, `percentage`, `any`. | | monitor_options | sensitivity | double | Sensitivity of the anomaly detection model, expressed as a multiplier on the width of the predicted bounds. Higher values widen the bounds and produce fewer alerts; lower values tighten them and produce more alerts. Defaults to `3.0`. | | monitor_options | source_to_target_config | object | Configuration for a source to target monitor, which compares the same measure across two data entities and alerts on the difference between them. | | source_to_target_config | diff_type [*required*] | enum | How the difference between the source and target measures is computed. `absolute` subtracts the two values, `diff_percent` expresses the difference as a percentage of the source value. Allowed enum values: `absolute`, `diff_percent`. | | source_to_target_config | entity_type [*required*] | string | Type of the data entities being compared. | | source_to_target_config | source [*required*] | object | Measure configuration for one side of a source to target comparison. | | source | custom_sql | string | Custom SQL query used to compute the measure for this entity. | | source | custom_where | string | Custom WHERE clause applied when computing the measure for this entity. | | source | entity_id [*required*] | string | Identifier of the data entity to measure. | | source | entity_type [*required*] | string | Type of the data entity to measure. | | source | group_by_columns | [string] | Columns to group results by when computing the measure for this entity. | | source_to_target_config | target [*required*] | object | Measure configuration for one side of a source to target comparison. | | target | custom_sql | string | Custom SQL query used to compute the measure for this entity. | | target | custom_where | string | Custom WHERE clause applied when computing the measure for this entity. | | target | entity_id [*required*] | string | Identifier of the data entity to measure. | | target | entity_type [*required*] | string | Type of the data entity to measure. | | target | group_by_columns | [string] | Columns to group results by when computing the measure for this entity. | | Object 3 | name [*required*] | string | Name of the query for use in formulas. | | Object 3 | schema_version | string | Schema version for the data quality query. | | Object 3 | scope | string | Optional scoping expression to further filter metrics. Uses metrics filter syntax. This is useful when an entity has been configured to emit metrics with additional tags. | | variables | Object 4 | object | A formula and functions data jobs query. | | Object 4 | job_type [*required*] | string | The type of job being monitored. Valid values include: `databricks.job`, `spark.application`, `airflow.dag`, `dbt.job`, `dbt.model`, `dbt.test`, `glue.job`. Custom job types are supported with the `custom.ol.` prefix. | | Object 4 | jobs_query [*required*] | string | Filter expression used to select the jobs to monitor. | | Object 4 | name [*required*] | string | Name of the query for use in formulas. Must be `run_query`. | | Object 4 | query_dialect [*required*] | string | Query dialect for data jobs queries. Currently only `metric` is supported. | | variables | Object 5 | object | A formula and functions aggregate augmented query. Used to enrich base query results with data from a reference table. | | Object 5 | augment_query [*required*] | | Augment query for aggregate augmented queries. Can be an events query or a reference table query. | | augment_query | Object 1 | object | A formula and functions events query. | | Object 1 | compute [*required*] | object | Compute options. | | compute | aggregation [*required*] | enum | Aggregation methods for event platform queries. Allowed enum values: `count`, `cardinality`, `median`, `pc75`, `pc90`, `pc95`, `pc98`, `pc99`, `sum`, `min`, `max`, `avg`. | | compute | interval | int64 | A time interval in milliseconds. | | compute | metric | string | Measurable attribute to compute. | | compute | name | string | The name assigned to this aggregation, when multiple aggregations are defined for a query. | | compute | source | string | Source reference for composite query payloads. | | Object 1 | data_source [*required*] | enum | Data source for event platform-based queries. Allowed enum values: `rum`, `ci_pipelines`, `ci_tests`, `audit`, `events`, `logs`, `spans`, `database_queries`, `network`, `network_path`. | | Object 1 | group_by | [object] | Group by options. | | group_by | facet [*required*] | string | Event facet. | | group_by | limit | int64 | Number of groups to return. | | group_by | sort | object | Options for sorting group by results. | | sort | aggregation [*required*] | enum | Aggregation methods for event platform queries. Allowed enum values: `count`, `cardinality`, `median`, `pc75`, `pc90`, `pc95`, `pc98`, `pc99`, `sum`, `min`, `max`, `avg`. | | sort | metric | string | Metric used for sorting group by results. | | sort | order | enum | Direction of sort. Allowed enum values: `asc`, `desc`. Default: `desc`. | | group_by | source | string | Source reference for composite query payloads. | | Object 1 | indexes | [string] | An array of index names to query in the stream. Omit or use `[]` to query all indexes at once. | | Object 1 | name [*required*] | string | Name of the query for use in formulas. | | Object 1 | search | object | Search options. | | search | query [*required*] | string | Events search string. | | augment_query | | object | A reference table query for use in aggregate queries. | | | columns | [object] | List of columns to retrieve from the reference table. | | columns | alias | string | Optional alias for the column. | | columns | name [*required*] | string | Name of the column. | | | data_source [*required*] | enum | Data source for reference table queries. Allowed enum values: `reference_table`. | | | name | string | Name of the query. | | | query_filter | string | Optional filter expression for the reference table query. | | | table_name [*required*] | string | Name of the reference table. | | Object 5 | base_query [*required*] | | Base query for aggregate queries. Can be an events query or a metrics query. | | base_query | Object 1 | object | A formula and functions events query. | | Object 1 | compute [*required*] | object | Compute options. | | compute | aggregation [*required*] | enum | Aggregation methods for event platform queries. Allowed enum values: `count`, `cardinality`, `median`, `pc75`, `pc90`, `pc95`, `pc98`, `pc99`, `sum`, `min`, `max`, `avg`. | | compute | interval | int64 | A time interval in milliseconds. | | compute | metric | string | Measurable attribute to compute. | | compute | name | string | The name assigned to this aggregation, when multiple aggregations are defined for a query. | | compute | source | string | Source reference for composite query payloads. | | Object 1 | data_source [*required*] | enum | Data source for event platform-based queries. Allowed enum values: `rum`, `ci_pipelines`, `ci_tests`, `audit`, `events`, `logs`, `spans`, `database_queries`, `network`, `network_path`. | | Object 1 | group_by | [object] | Group by options. | | group_by | facet [*required*] | string | Event facet. | | group_by | limit | int64 | Number of groups to return. | | group_by | sort | object | Options for sorting group by results. | | sort | aggregation [*required*] | enum | Aggregation methods for event platform queries. Allowed enum values: `count`, `cardinality`, `median`, `pc75`, `pc90`, `pc95`, `pc98`, `pc99`, `sum`, `min`, `max`, `avg`. | | sort | metric | string | Metric used for sorting group by results. | | sort | order | enum | Direction of sort. Allowed enum values: `asc`, `desc`. Default: `desc`. | | group_by | source | string | Source reference for composite query payloads. | | Object 1 | indexes | [string] | An array of index names to query in the stream. Omit or use `[]` to query all indexes at once. | | Object 1 | name [*required*] | string | Name of the query for use in formulas. | | Object 1 | search | object | Search options. | | search | query [*required*] | string | Events search string. | | base_query | Object 2 | object | A formula and functions metrics query for use in aggregate queries. | | Object 2 | aggregator | enum | Aggregator for metrics queries. Allowed enum values: `avg`, `min`, `max`, `sum`, `last`, `mean`, `area`, `l2norm`, `percentile`, `stddev`, `count_unique`. | | Object 2 | data_source [*required*] | enum | Data source for metrics queries. Allowed enum values: `metrics`, `cloud_cost`, `datadog_usage`. | | Object 2 | name | string | Name of the query for use in formulas. | | Object 2 | query [*required*] | string | The metrics query definition. | | Object 5 | compute [*required*] | [object] | Compute options for the query. | | compute | aggregation [*required*] | enum | Aggregation methods for event platform queries. Allowed enum values: `count`, `cardinality`, `median`, `pc75`, `pc90`, `pc95`, `pc98`, `pc99`, `sum`, `min`, `max`, `avg`. | | compute | interval | int64 | A time interval in milliseconds. | | compute | metric | string | Measurable attribute to compute. | | compute | name | string | The name assigned to this aggregation, when multiple aggregations are defined for a query. | | compute | source | string | Source reference for composite query payloads. | | Object 5 | data_source [*required*] | enum | Data source for aggregate augmented queries. Allowed enum values: `aggregate_augmented_query`. | | Object 5 | group_by [*required*] | [object] | Group by options for the query. | | group_by | facet [*required*] | string | Event facet. | | group_by | limit | int64 | Number of groups to return. | | group_by | sort | object | Options for sorting group by results. | | sort | aggregation [*required*] | enum | Aggregation methods for event platform queries. Allowed enum values: `count`, `cardinality`, `median`, `pc75`, `pc90`, `pc95`, `pc98`, `pc99`, `sum`, `min`, `max`, `avg`. | | sort | metric | string | Metric used for sorting group by results. | | sort | order | enum | Direction of sort. Allowed enum values: `asc`, `desc`. Default: `desc`. | | group_by | source | string | Source reference for composite query payloads. | | Object 5 | join_condition [*required*] | object | Join condition for aggregate augmented queries. | | join_condition | augment_attribute [*required*] | string | Attribute from the augment query to join on. | | join_condition | base_attribute [*required*] | string | Attribute from the base query to join on. | | join_condition | join_type [*required*] | enum | Join type for aggregate query join conditions. Allowed enum values: `inner`, `left`. | | Object 5 | name | string | Name of the query for use in formulas. | | variables | Object 6 | object | A formula and functions aggregate filtered query. Used to filter base query results using data from another source. | | Object 6 | base_query [*required*] | | Base query for aggregate queries. Can be an events query or a metrics query. | | base_query | Object 1 | object | A formula and functions events query. | | Object 1 | compute [*required*] | object | Compute options. | | compute | aggregation [*required*] | enum | Aggregation methods for event platform queries. Allowed enum values: `count`, `cardinality`, `median`, `pc75`, `pc90`, `pc95`, `pc98`, `pc99`, `sum`, `min`, `max`, `avg`. | | compute | interval | int64 | A time interval in milliseconds. | | compute | metric | string | Measurable attribute to compute. | | compute | name | string | The name assigned to this aggregation, when multiple aggregations are defined for a query. | | compute | source | string | Source reference for composite query payloads. | | Object 1 | data_source [*required*] | enum | Data source for event platform-based queries. Allowed enum values: `rum`, `ci_pipelines`, `ci_tests`, `audit`, `events`, `logs`, `spans`, `database_queries`, `network`, `network_path`. | | Object 1 | group_by | [object] | Group by options. | | group_by | facet [*required*] | string | Event facet. | | group_by | limit | int64 | Number of groups to return. | | group_by | sort | object | Options for sorting group by results. | | sort | aggregation [*required*] | enum | Aggregation methods for event platform queries. Allowed enum values: `count`, `cardinality`, `median`, `pc75`, `pc90`, `pc95`, `pc98`, `pc99`, `sum`, `min`, `max`, `avg`. | | sort | metric | string | Metric used for sorting group by results. | | sort | order | enum | Direction of sort. Allowed enum values: `asc`, `desc`. Default: `desc`. | | group_by | source | string | Source reference for composite query payloads. | | Object 1 | indexes | [string] | An array of index names to query in the stream. Omit or use `[]` to query all indexes at once. | | Object 1 | name [*required*] | string | Name of the query for use in formulas. | | Object 1 | search | object | Search options. | | search | query [*required*] | string | Events search string. | | base_query | Object 2 | object | A formula and functions metrics query for use in aggregate queries. | | Object 2 | aggregator | enum | Aggregator for metrics queries. Allowed enum values: `avg`, `min`, `max`, `sum`, `last`, `mean`, `area`, `l2norm`, `percentile`, `stddev`, `count_unique`. | | Object 2 | data_source [*required*] | enum | Data source for metrics queries. Allowed enum values: `metrics`, `cloud_cost`, `datadog_usage`. | | Object 2 | name | string | Name of the query for use in formulas. | | Object 2 | query [*required*] | string | The metrics query definition. | | Object 6 | compute | [object] | Compute options for the query. | | compute | aggregation [*required*] | enum | Aggregation methods for event platform queries. Allowed enum values: `count`, `cardinality`, `median`, `pc75`, `pc90`, `pc95`, `pc98`, `pc99`, `sum`, `min`, `max`, `avg`. | | compute | interval | int64 | A time interval in milliseconds. | | compute | metric | string | Measurable attribute to compute. | | compute | name | string | The name assigned to this aggregation, when multiple aggregations are defined for a query. | | compute | source | string | Source reference for composite query payloads. | | Object 6 | data_source [*required*] | enum | Data source for aggregate filtered queries. Allowed enum values: `aggregate_filtered_query`. | | Object 6 | filter_query [*required*] | | Filter query for aggregate filtered queries. Can be an events query or a reference table query. | | filter_query | Object 1 | object | A formula and functions events query. | | Object 1 | compute [*required*] | object | Compute options. | | compute | aggregation [*required*] | enum | Aggregation methods for event platform queries. Allowed enum values: `count`, `cardinality`, `median`, `pc75`, `pc90`, `pc95`, `pc98`, `pc99`, `sum`, `min`, `max`, `avg`. | | compute | interval | int64 | A time interval in milliseconds. | | compute | metric | string | Measurable attribute to compute. | | compute | name | string | The name assigned to this aggregation, when multiple aggregations are defined for a query. | | compute | source | string | Source reference for composite query payloads. | | Object 1 | data_source [*required*] | enum | Data source for event platform-based queries. Allowed enum values: `rum`, `ci_pipelines`, `ci_tests`, `audit`, `events`, `logs`, `spans`, `database_queries`, `network`, `network_path`. | | Object 1 | group_by | [object] | Group by options. | | group_by | facet [*required*] | string | Event facet. | | group_by | limit | int64 | Number of groups to return. | | group_by | sort | object | Options for sorting group by results. | | sort | aggregation [*required*] | enum | Aggregation methods for event platform queries. Allowed enum values: `count`, `cardinality`, `median`, `pc75`, `pc90`, `pc95`, `pc98`, `pc99`, `sum`, `min`, `max`, `avg`. | | sort | metric | string | Metric used for sorting group by results. | | sort | order | enum | Direction of sort. Allowed enum values: `asc`, `desc`. Default: `desc`. | | group_by | source | string | Source reference for composite query payloads. | | Object 1 | indexes | [string] | An array of index names to query in the stream. Omit or use `[]` to query all indexes at once. | | Object 1 | name [*required*] | string | Name of the query for use in formulas. | | Object 1 | search | object | Search options. | | search | query [*required*] | string | Events search string. | | filter_query | | object | A reference table query for use in aggregate queries. | | | columns | [object] | List of columns to retrieve from the reference table. | | columns | alias | string | Optional alias for the column. | | columns | name [*required*] | string | Name of the column. | | | data_source [*required*] | enum | Data source for reference table queries. Allowed enum values: `reference_table`. | | | name | string | Name of the query. | | | query_filter | string | Optional filter expression for the reference table query. | | | table_name [*required*] | string | Name of the reference table. | | Object 6 | filters [*required*] | [object] | Filter conditions for the query. | | filters | base_attribute [*required*] | string | Attribute from the base query to filter on. | | filters | exclude | boolean | Whether to exclude matching records instead of including them. Default: `false`. | | filters | filter_attribute [*required*] | string | Attribute from the filter query to match against. | | Object 6 | group_by | [object] | Group by options for the query. | | group_by | facet [*required*] | string | Event facet. | | group_by | limit | int64 | Number of groups to return. | | group_by | sort | object | Options for sorting group by results. | | sort | aggregation [*required*] | enum | Aggregation methods for event platform queries. Allowed enum values: `count`, `cardinality`, `median`, `pc75`, `pc90`, `pc95`, `pc98`, `pc99`, `sum`, `min`, `max`, `avg`. | | sort | metric | string | Metric used for sorting group by results. | | sort | order | enum | Direction of sort. Allowed enum values: `asc`, `desc`. Default: `desc`. | | group_by | source | string | Source reference for composite query payloads. | | Object 6 | name | string | Name of the query for use in formulas. | | | priority | int64 | Integer from 1 (high) to 5 (low) indicating alert severity. | | | query [*required*] | string | The monitor query. | | | restricted_roles | [string] | A list of unique role identifiers to define which roles are allowed to edit the monitor. The unique identifiers for all roles can be pulled from the [Roles API](https://docs.datadoghq.com/api/latest/roles.md#list-roles) and are located in the `data.id` field. Editing a monitor includes any updates to the monitor configuration, monitor deletion, and muting of the monitor for any amount of time. You can use the [Restriction Policies API](https://docs.datadoghq.com/api/latest/restriction-policies.md) to manage write authorization for individual monitors by teams and users, in addition to roles. | | | tags | [string] | Tags associated to your monitor. | | | type [*required*] | enum | The type of the monitor. For more information about `type`, see the [monitor options](https://docs.datadoghq.com/monitors/guide/monitor_api_options.md) docs. Allowed enum values: `composite`, `event alert`, `log alert`, `metric alert`, `process alert`, `query alert`, `rum alert`, `service check`, `synthetics alert`, `trace-analytics alert`, `slo alert`, `event-v2 alert`, `audit alert`, `ci-pipelines alert`, `ci-tests alert`, `error-tracking alert`, `database-monitoring alert`, `network-performance alert`, `cost alert`, `data-quality alert`, `network-path alert`, `data-jobs alert`, `llm-observability alert`. | {% /tab %} {% tab label="Example" %} **Create a Cost Monitor returns "OK" response** ```json { "name": "Example Monitor", "type": "cost alert", "query": "formula(\"exclude_null(query1)\").last(\"7d\").anomaly(direction=\"above\", threshold=10) >= 5", "message": "some message Notify: @hipchat-channel", "tags": [ "test:examplemonitor", "env:ci" ], "priority": 3, "options": { "thresholds": { "critical": 5, "warning": 3 }, "variables": [ { "data_source": "cloud_cost", "query": "sum:aws.cost.net.amortized.shared.resources.allocated{aws_product IN (amplify ,athena, backup, bedrock ) } by {aws_product}.rollup(sum, 86400)", "name": "query1", "aggregator": "sum" } ], "include_tags": true } } ``` **Create a Data Jobs monitor returns "OK" response** ```json { "name": "Example-Monitor", "type": "data-jobs alert", "query": "formula(\"failed_runs(run_query)\").by(job_name,workspace_name).last(10d) > 0", "message": "Data jobs alert triggered", "tags": [ "test:examplemonitor", "env:ci" ], "options": { "thresholds": { "critical": 0 }, "variables": [ { "name": "run_query", "jobs_query": "job_name:*", "job_type": "databricks.job", "query_dialect": "metric" } ] } } ``` **Create a Data Quality monitor returns "OK" response** ```json { "name": "Example-Monitor", "type": "data-quality alert", "query": "formula(\"query1\").last(\"5m\") > 100", "message": "Data quality alert triggered", "tags": [ "test:examplemonitor", "env:ci" ], "priority": 3, "options": { "thresholds": { "critical": 100 }, "variables": [ { "name": "query1", "data_source": "data_quality_metrics", "measure": "row_count", "filter": "search for column where `database:production AND table:users`", "group_by": [ "entity_id" ] } ] } } ``` {% /tab %} {% /tabs %} ### Response {% tabs %} {% tab label="200" %} OK {% tabs %} {% tab label="Model" %} Object describing a monitor. | Parent field | Field | Type | Description | | ----------------------------- | ------------------------------ | --------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | | assets | [object] | The list of monitor assets tied to a monitor, which represents key links for users to take action on monitor alerts (for example, runbooks). | | assets | category [*required*] | enum | Indicates the type of asset this entity represents on a monitor. Allowed enum values: `runbook`. | | assets | name [*required*] | string | Name for the monitor asset | | assets | resource_key | string | Represents the identifier of the internal Datadog resource that this asset represents. IDs in this field should be passed in as strings. | | assets | resource_type | enum | Type of internal Datadog resource associated with a monitor asset. Allowed enum values: `notebook`. | | assets | url [*required*] | string | URL link for the asset. For links with an internal resource type set, this should be the relative path to where the Datadog domain is appended internally. For external links, this should be the full URL path. | | | created | date-time | Timestamp of the monitor creation. Read-only. | | | creator | object | Object describing the creator of the shared element. Read-only. | | creator | email | string | Email of the creator. | | creator | handle | string | Handle of the creator. | | creator | name | string | Name of the creator. | | | deleted | date-time | Whether or not the monitor is deleted. (Always `null`) Read-only. | | | draft_status | enum | Indicates whether the monitor is in a draft or published state. `draft`: The monitor appears as Draft and does not send notifications. `published`: The monitor is active and evaluates conditions and notify as configured. This field is in preview. The draft value is only available to customers with the feature enabled. Allowed enum values: `draft`, `published`. Default: `published`. | | | id | int64 | ID of this monitor. Read-only. | | | matching_downtimes | [object] | A list of active v1 downtimes that match this monitor. | | matching_downtimes | end | int64 | POSIX timestamp to end the downtime. | | matching_downtimes | id [*required*] | int64 | The downtime ID. Read-only. | | matching_downtimes | scope | [string] | The scope(s) to which the downtime applies. Must be in `key:value` format. For example, `host:app2`. Provide multiple scopes as a comma-separated list like `env:dev,env:prod`. The resulting downtime applies to sources that matches ALL provided scopes (`env:dev` **AND** `env:prod`). | | matching_downtimes | start | int64 | POSIX timestamp to start the downtime. | | | message | string | A message to include with notifications for this monitor. | | | modified | date-time | Last timestamp when the monitor was edited. Read-only. | | | multi | boolean | Whether or not the monitor is broken down on different groups. Read-only. | | | name | string | The monitor name. | | | options | object | List of options associated with your monitor. | | options | aggregation | object | Type of aggregation performed in the monitor query. Read-only. | | aggregation | group_by | string | Group to break down the monitor on. | | aggregation | metric | string | Metric name used in the monitor. | | aggregation | type | string | Metric type used in the monitor. | | options | device_ids | [string] | **DEPRECATED**: IDs of the device the Synthetics monitor is running on. Read-only. | | options | enable_logs_sample | boolean | Whether or not to send a log sample when the log monitor triggers. | | options | enable_samples | boolean | Whether or not to send a list of samples when the monitor triggers. This is only used by CI Test and Pipeline monitors. | | options | escalation_message | string | We recommend using the [is_renotify](https://docs.datadoghq.com/monitors/notify.md?tab=is_alert#renotify), block in the original message instead. A message to include with a re-notification. Supports the `@username` notification we allow elsewhere. Not applicable if `renotify_interval` is `None`. | | options | evaluation_delay | int64 | Time (in seconds) to delay evaluation, as a non-negative integer. For example, if the value is set to `300` (5min), the timeframe is set to `last_5m` and the time is 7:00, the monitor evaluates data from 6:50 to 6:55. This is useful for AWS CloudWatch and other backfilled metrics to ensure the monitor always has data during evaluation. | | options | group_retention_duration | string | The time span after which groups with missing data are dropped from the monitor state. The minimum value is one hour, and the maximum value is 72 hours. Example values are: "60m", "1h", and "2d". This option is only available for APM Trace Analytics, Audit Trail, CI, Error Tracking, Event, Logs, and RUM monitors. | | options | groupby_simple_monitor | boolean | **DEPRECATED**: Whether the log alert monitor triggers a single alert or multiple alerts when any group breaches a threshold. Use `notify_by` instead. | | options | include_tags | boolean | A Boolean indicating whether notifications from this monitor automatically inserts its triggering tags into the title. **Examples** - If `True`, `[Triggered on {host:h1}] Monitor Title` - If `False`, `[Triggered] Monitor Title` Default: `true`. | | options | locked | boolean | **DEPRECATED**: Whether or not the monitor is locked (only editable by creator and admins). Use `restricted_roles` instead. | | options | min_failure_duration | int64 | How long the test should be in failure before alerting (integer, number of seconds, max 7200). Default: `0`. | | options | min_location_failed | int64 | The minimum number of locations in failure at the same time during at least one moment in the `min_failure_duration` period (`min_location_failed` and `min_failure_duration` are part of the advanced alerting rules - integer, >= 1). Default: `1`. | | options | new_group_delay | int64 | Time (in seconds) to skip evaluations for new groups. For example, this option can be used to skip evaluations for new hosts while they initialize. Must be a non negative integer. | | options | new_host_delay | int64 | **DEPRECATED**: Time (in seconds) to allow a host to boot and applications to fully start before starting the evaluation of monitor results. Should be a non negative integer. Use new_group_delay instead. Default: `300`. | | options | no_data_timeframe | int64 | The number of minutes before a monitor notifies after data stops reporting. Datadog recommends at least 2x the monitor timeframe for query alerts or 2 minutes for service checks. If omitted, 2x the evaluation timeframe is used for query alerts, and 24 hours is used for service checks. | | options | notification_preset_name | enum | Toggles the display of additional content sent in the monitor notification. Allowed enum values: `show_all`, `hide_query`, `hide_handles`, `hide_all`, `hide_query_and_handles`, `show_only_snapshot`, `hide_handles_and_footer`. Default: `show_all`. | | options | notify_audit | boolean | A Boolean indicating whether tagged users is notified on changes to this monitor. Default: `false`. | | options | notify_by | [string] | Controls what granularity a monitor alerts on. Only available for monitors with groupings. For instance, a monitor grouped by `cluster`, `namespace`, and `pod` can be configured to only notify on each new `cluster` violating the alert conditions by setting `notify_by` to `["cluster"]`. Tags mentioned in `notify_by` must be a subset of the grouping tags in the query. For example, a query grouped by `cluster` and `namespace` cannot notify on `region`. Setting `notify_by` to `["*"]` configures the monitor to notify as a simple-alert. | | options | notify_no_data | boolean | A Boolean indicating whether this monitor notifies when data stops reporting. Defaults to `false`. | | options | on_missing_data | enum | Controls how groups or monitors are treated if an evaluation does not return any data points. The default option results in different behavior depending on the monitor query type. For monitors using Count queries, an empty monitor evaluation is treated as 0 and is compared to the threshold conditions. For monitors using any query type other than Count, for example Gauge, Measure, or Rate, the monitor shows the last known status. This option is available for APM Trace Analytics, Audit Trail, CI, Error Tracking, Event, Logs, and RUM monitors. It is also required for metric monitors that use `scheduling_options.custom_schedule`. Allowed enum values: `default`, `show_no_data`, `show_and_notify_no_data`, `resolve`. | | options | renotify_interval | int64 | The number of minutes after the last notification before a monitor re-notifies on the current status. It only re-notifies if it’s not resolved. Default: `null`. | | options | renotify_occurrences | int64 | The number of times re-notification messages should be sent on the current status at the provided re-notification interval. | | options | renotify_statuses | [string] | The types of monitor statuses for which re-notification messages are sent. Default: **null** if `renotify_interval` is **null**. If `renotify_interval` is set, defaults to renotify on `Alert` and `No Data`. | | options | require_full_window | boolean | A Boolean indicating whether this monitor needs a full window of data before it’s evaluated. We highly recommend you set this to `false` for sparse metrics, otherwise some evaluations are skipped. Default is false. This setting only applies to metric monitors. | | options | scheduling_options | object | Configuration options for scheduling. | | scheduling_options | custom_schedule | object | Configuration options for the custom schedule. **This feature is in private beta.** | | custom_schedule | recurrences | [object] | Array of custom schedule recurrences. | | recurrences | rrule | string | Defines the recurrence rule (RRULE) for a given schedule. | | recurrences | start | string | Defines the start date and time of the recurring schedule. | | recurrences | timezone | string | Defines the timezone the schedule runs on. | | scheduling_options | evaluation_window | object | Configuration options for the evaluation window. If `hour_starts` is set, no other fields may be set. Otherwise, `day_starts` and `month_starts` must be set together. | | evaluation_window | day_starts | string | The time of the day at which a one day cumulative evaluation window starts. | | evaluation_window | hour_starts | int32 | The minute of the hour at which a one hour cumulative evaluation window starts. | | evaluation_window | month_starts | int32 | The day of the month at which a one month cumulative evaluation window starts. | | evaluation_window | timezone | string | The timezone of the time of the day of the cumulative evaluation window start. | | options | silenced | object | **DEPRECATED**: Information about the downtime applied to the monitor. Only shows v1 downtimes. | | additionalProperties | | int64 | UTC epoch timestamp in seconds when the downtime for the group expires. | | options | synthetics_check_id | string | **DEPRECATED**: ID of the corresponding Synthetic check. | | options | threshold_windows | object | Alerting time window options. | | threshold_windows | recovery_window | string | Describes how long an anomalous metric must be normal before the alert recovers. | | threshold_windows | trigger_window | string | Describes how long a metric must be anomalous before an alert triggers. | | options | thresholds | object | List of the different monitor threshold available. | | thresholds | critical | double | The monitor `CRITICAL` threshold. | | thresholds | critical_query | string | Query evaluated as a dynamic `CRITICAL` threshold. Only supported on metric monitors with a formula query and options['variables']. Cannot be combined with static thresholds. This field is in preview. | | thresholds | critical_recovery | double | The monitor `CRITICAL` recovery threshold. | | thresholds | critical_recovery_query | string | Query evaluated as a dynamic `CRITICAL` recovery threshold. Only supported on metric monitors with a formula query and options['variables']. Cannot be combined with static thresholds. This field is in preview. | | thresholds | ok | double | The monitor `OK` threshold. | | thresholds | unknown | double | The monitor UNKNOWN threshold. | | thresholds | warning | double | The monitor `WARNING` threshold. | | thresholds | warning_recovery | double | The monitor `WARNING` recovery threshold. | | options | timeout_h | int64 | The number of hours of the monitor not reporting data before it automatically resolves from a triggered state. The minimum allowed value is 0 hours. The maximum allowed value is 24 hours. Default: `null`. | | options | variables | [] | List of requests that can be used in the monitor query. **This feature is currently in beta.** | | variables | Object 1 | object | A formula and functions events query. | | Object 1 | compute [*required*] | object | Compute options. | | compute | aggregation [*required*] | enum | Aggregation methods for event platform queries. Allowed enum values: `count`, `cardinality`, `median`, `pc75`, `pc90`, `pc95`, `pc98`, `pc99`, `sum`, `min`, `max`, `avg`. | | compute | interval | int64 | A time interval in milliseconds. | | compute | metric | string | Measurable attribute to compute. | | compute | name | string | The name assigned to this aggregation, when multiple aggregations are defined for a query. | | compute | source | string | Source reference for composite query payloads. | | Object 1 | data_source [*required*] | enum | Data source for event platform-based queries. Allowed enum values: `rum`, `ci_pipelines`, `ci_tests`, `audit`, `events`, `logs`, `spans`, `database_queries`, `network`, `network_path`. | | Object 1 | group_by | [object] | Group by options. | | group_by | facet [*required*] | string | Event facet. | | group_by | limit | int64 | Number of groups to return. | | group_by | sort | object | Options for sorting group by results. | | sort | aggregation [*required*] | enum | Aggregation methods for event platform queries. Allowed enum values: `count`, `cardinality`, `median`, `pc75`, `pc90`, `pc95`, `pc98`, `pc99`, `sum`, `min`, `max`, `avg`. | | sort | metric | string | Metric used for sorting group by results. | | sort | order | enum | Direction of sort. Allowed enum values: `asc`, `desc`. Default: `desc`. | | group_by | source | string | Source reference for composite query payloads. | | Object 1 | indexes | [string] | An array of index names to query in the stream. Omit or use `[]` to query all indexes at once. | | Object 1 | name [*required*] | string | Name of the query for use in formulas. | | Object 1 | search | object | Search options. | | search | query [*required*] | string | Events search string. | | variables | Object 2 | object | A formula and functions cost query. | | Object 2 | aggregator | enum | Aggregation methods for metric queries. Allowed enum values: `avg`, `sum`, `max`, `min`, `last`, `area`, `l2norm`, `percentile`, `stddev`. | | Object 2 | data_source [*required*] | enum | Data source for cost queries. Allowed enum values: `metrics`, `cloud_cost`, `datadog_usage`. | | Object 2 | name [*required*] | string | Name of the query for use in formulas. | | Object 2 | query [*required*] | string | The monitor query. | | variables | Object 3 | object | A formula and functions data quality query. | | Object 3 | data_source [*required*] | enum | Data source for data quality queries. Allowed enum values: `data_quality_metrics`. | | Object 3 | filter [*required*] | string | Filter expression used to match on data entities. Uses Aastra query syntax. | | Object 3 | group_by | [string] | Optional grouping fields for aggregation. | | Object 3 | measure [*required*] | string | The data quality measure to query. Common values include: `bytes`, `cardinality`, `custom`, `freshness`, `max`, `mean`, `min`, `nullness`, `percent_negative`, `percent_zero`, `row_count`, `stddev`, `sum`, `uniqueness`. Additional values may be supported. | | Object 3 | monitor_options | object | Monitor configuration options for data quality queries. | | monitor_options | crontab_override | string | Crontab expression to override the default schedule. | | monitor_options | custom_sql | string | Custom SQL query for the monitor. | | monitor_options | custom_where | string | Custom WHERE clause for the query. | | monitor_options | group_by_columns | [string] | Columns to group results by. | | monitor_options | model_configuration | object | Tuning options for the anomaly detection model used by the monitor. | | model_configuration | auto_resolve_days | int32 | Number of days after which an open alert is automatically resolved. When unset, alerts stay open until the measure returns within bounds. | | model_configuration | enable_flatline_detection | boolean | Whether to alert when the measure stops changing entirely. Defaults to `true`. | | model_configuration | function | enum | Function applied to the measure before it is compared against the predicted bounds. Allowed enum values: `DIFF`, `DIFF_PERCENT`. | | model_configuration | min_lower_bound_size | double | Minimum distance between the predicted value and the lower bound. Widening the lower bound to at least this size suppresses alerts on small downward deviations. When unset, no minimum is enforced. | | model_configuration | min_upper_bound_size | double | Minimum distance between the predicted value and the upper bound. Widening the upper bound to at least this size suppresses alerts on small upward deviations. When unset, no minimum is enforced. | | model_configuration | model_bounds_override | enum | Restricts which predicted bound the monitor alerts on. `UPPER_ONLY` alerts only when the measure rises above the upper bound, `LOWER_ONLY` only when it falls below the lower bound. When unset, the monitor alerts on both. Allowed enum values: `UPPER_ONLY`, `LOWER_ONLY`. | | monitor_options | model_type_override | enum | Override for the model type used in anomaly detection. Allowed enum values: `freshness`, `percentage`, `any`. | | monitor_options | sensitivity | double | Sensitivity of the anomaly detection model, expressed as a multiplier on the width of the predicted bounds. Higher values widen the bounds and produce fewer alerts; lower values tighten them and produce more alerts. Defaults to `3.0`. | | monitor_options | source_to_target_config | object | Configuration for a source to target monitor, which compares the same measure across two data entities and alerts on the difference between them. | | source_to_target_config | diff_type [*required*] | enum | How the difference between the source and target measures is computed. `absolute` subtracts the two values, `diff_percent` expresses the difference as a percentage of the source value. Allowed enum values: `absolute`, `diff_percent`. | | source_to_target_config | entity_type [*required*] | string | Type of the data entities being compared. | | source_to_target_config | source [*required*] | object | Measure configuration for one side of a source to target comparison. | | source | custom_sql | string | Custom SQL query used to compute the measure for this entity. | | source | custom_where | string | Custom WHERE clause applied when computing the measure for this entity. | | source | entity_id [*required*] | string | Identifier of the data entity to measure. | | source | entity_type [*required*] | string | Type of the data entity to measure. | | source | group_by_columns | [string] | Columns to group results by when computing the measure for this entity. | | source_to_target_config | target [*required*] | object | Measure configuration for one side of a source to target comparison. | | target | custom_sql | string | Custom SQL query used to compute the measure for this entity. | | target | custom_where | string | Custom WHERE clause applied when computing the measure for this entity. | | target | entity_id [*required*] | string | Identifier of the data entity to measure. | | target | entity_type [*required*] | string | Type of the data entity to measure. | | target | group_by_columns | [string] | Columns to group results by when computing the measure for this entity. | | Object 3 | name [*required*] | string | Name of the query for use in formulas. | | Object 3 | schema_version | string | Schema version for the data quality query. | | Object 3 | scope | string | Optional scoping expression to further filter metrics. Uses metrics filter syntax. This is useful when an entity has been configured to emit metrics with additional tags. | | variables | Object 4 | object | A formula and functions data jobs query. | | Object 4 | job_type [*required*] | string | The type of job being monitored. Valid values include: `databricks.job`, `spark.application`, `airflow.dag`, `dbt.job`, `dbt.model`, `dbt.test`, `glue.job`. Custom job types are supported with the `custom.ol.` prefix. | | Object 4 | jobs_query [*required*] | string | Filter expression used to select the jobs to monitor. | | Object 4 | name [*required*] | string | Name of the query for use in formulas. Must be `run_query`. | | Object 4 | query_dialect [*required*] | string | Query dialect for data jobs queries. Currently only `metric` is supported. | | variables | Object 5 | object | A formula and functions aggregate augmented query. Used to enrich base query results with data from a reference table. | | Object 5 | augment_query [*required*] | | Augment query for aggregate augmented queries. Can be an events query or a reference table query. | | augment_query | Object 1 | object | A formula and functions events query. | | Object 1 | compute [*required*] | object | Compute options. | | compute | aggregation [*required*] | enum | Aggregation methods for event platform queries. Allowed enum values: `count`, `cardinality`, `median`, `pc75`, `pc90`, `pc95`, `pc98`, `pc99`, `sum`, `min`, `max`, `avg`. | | compute | interval | int64 | A time interval in milliseconds. | | compute | metric | string | Measurable attribute to compute. | | compute | name | string | The name assigned to this aggregation, when multiple aggregations are defined for a query. | | compute | source | string | Source reference for composite query payloads. | | Object 1 | data_source [*required*] | enum | Data source for event platform-based queries. Allowed enum values: `rum`, `ci_pipelines`, `ci_tests`, `audit`, `events`, `logs`, `spans`, `database_queries`, `network`, `network_path`. | | Object 1 | group_by | [object] | Group by options. | | group_by | facet [*required*] | string | Event facet. | | group_by | limit | int64 | Number of groups to return. | | group_by | sort | object | Options for sorting group by results. | | sort | aggregation [*required*] | enum | Aggregation methods for event platform queries. Allowed enum values: `count`, `cardinality`, `median`, `pc75`, `pc90`, `pc95`, `pc98`, `pc99`, `sum`, `min`, `max`, `avg`. | | sort | metric | string | Metric used for sorting group by results. | | sort | order | enum | Direction of sort. Allowed enum values: `asc`, `desc`. Default: `desc`. | | group_by | source | string | Source reference for composite query payloads. | | Object 1 | indexes | [string] | An array of index names to query in the stream. Omit or use `[]` to query all indexes at once. | | Object 1 | name [*required*] | string | Name of the query for use in formulas. | | Object 1 | search | object | Search options. | | search | query [*required*] | string | Events search string. | | augment_query | | object | A reference table query for use in aggregate queries. | | | columns | [object] | List of columns to retrieve from the reference table. | | columns | alias | string | Optional alias for the column. | | columns | name [*required*] | string | Name of the column. | | | data_source [*required*] | enum | Data source for reference table queries. Allowed enum values: `reference_table`. | | | name | string | Name of the query. | | | query_filter | string | Optional filter expression for the reference table query. | | | table_name [*required*] | string | Name of the reference table. | | Object 5 | base_query [*required*] | | Base query for aggregate queries. Can be an events query or a metrics query. | | base_query | Object 1 | object | A formula and functions events query. | | Object 1 | compute [*required*] | object | Compute options. | | compute | aggregation [*required*] | enum | Aggregation methods for event platform queries. Allowed enum values: `count`, `cardinality`, `median`, `pc75`, `pc90`, `pc95`, `pc98`, `pc99`, `sum`, `min`, `max`, `avg`. | | compute | interval | int64 | A time interval in milliseconds. | | compute | metric | string | Measurable attribute to compute. | | compute | name | string | The name assigned to this aggregation, when multiple aggregations are defined for a query. | | compute | source | string | Source reference for composite query payloads. | | Object 1 | data_source [*required*] | enum | Data source for event platform-based queries. Allowed enum values: `rum`, `ci_pipelines`, `ci_tests`, `audit`, `events`, `logs`, `spans`, `database_queries`, `network`, `network_path`. | | Object 1 | group_by | [object] | Group by options. | | group_by | facet [*required*] | string | Event facet. | | group_by | limit | int64 | Number of groups to return. | | group_by | sort | object | Options for sorting group by results. | | sort | aggregation [*required*] | enum | Aggregation methods for event platform queries. Allowed enum values: `count`, `cardinality`, `median`, `pc75`, `pc90`, `pc95`, `pc98`, `pc99`, `sum`, `min`, `max`, `avg`. | | sort | metric | string | Metric used for sorting group by results. | | sort | order | enum | Direction of sort. Allowed enum values: `asc`, `desc`. Default: `desc`. | | group_by | source | string | Source reference for composite query payloads. | | Object 1 | indexes | [string] | An array of index names to query in the stream. Omit or use `[]` to query all indexes at once. | | Object 1 | name [*required*] | string | Name of the query for use in formulas. | | Object 1 | search | object | Search options. | | search | query [*required*] | string | Events search string. | | base_query | Object 2 | object | A formula and functions metrics query for use in aggregate queries. | | Object 2 | aggregator | enum | Aggregator for metrics queries. Allowed enum values: `avg`, `min`, `max`, `sum`, `last`, `mean`, `area`, `l2norm`, `percentile`, `stddev`, `count_unique`. | | Object 2 | data_source [*required*] | enum | Data source for metrics queries. Allowed enum values: `metrics`, `cloud_cost`, `datadog_usage`. | | Object 2 | name | string | Name of the query for use in formulas. | | Object 2 | query [*required*] | string | The metrics query definition. | | Object 5 | compute [*required*] | [object] | Compute options for the query. | | compute | aggregation [*required*] | enum | Aggregation methods for event platform queries. Allowed enum values: `count`, `cardinality`, `median`, `pc75`, `pc90`, `pc95`, `pc98`, `pc99`, `sum`, `min`, `max`, `avg`. | | compute | interval | int64 | A time interval in milliseconds. | | compute | metric | string | Measurable attribute to compute. | | compute | name | string | The name assigned to this aggregation, when multiple aggregations are defined for a query. | | compute | source | string | Source reference for composite query payloads. | | Object 5 | data_source [*required*] | enum | Data source for aggregate augmented queries. Allowed enum values: `aggregate_augmented_query`. | | Object 5 | group_by [*required*] | [object] | Group by options for the query. | | group_by | facet [*required*] | string | Event facet. | | group_by | limit | int64 | Number of groups to return. | | group_by | sort | object | Options for sorting group by results. | | sort | aggregation [*required*] | enum | Aggregation methods for event platform queries. Allowed enum values: `count`, `cardinality`, `median`, `pc75`, `pc90`, `pc95`, `pc98`, `pc99`, `sum`, `min`, `max`, `avg`. | | sort | metric | string | Metric used for sorting group by results. | | sort | order | enum | Direction of sort. Allowed enum values: `asc`, `desc`. Default: `desc`. | | group_by | source | string | Source reference for composite query payloads. | | Object 5 | join_condition [*required*] | object | Join condition for aggregate augmented queries. | | join_condition | augment_attribute [*required*] | string | Attribute from the augment query to join on. | | join_condition | base_attribute [*required*] | string | Attribute from the base query to join on. | | join_condition | join_type [*required*] | enum | Join type for aggregate query join conditions. Allowed enum values: `inner`, `left`. | | Object 5 | name | string | Name of the query for use in formulas. | | variables | Object 6 | object | A formula and functions aggregate filtered query. Used to filter base query results using data from another source. | | Object 6 | base_query [*required*] | | Base query for aggregate queries. Can be an events query or a metrics query. | | base_query | Object 1 | object | A formula and functions events query. | | Object 1 | compute [*required*] | object | Compute options. | | compute | aggregation [*required*] | enum | Aggregation methods for event platform queries. Allowed enum values: `count`, `cardinality`, `median`, `pc75`, `pc90`, `pc95`, `pc98`, `pc99`, `sum`, `min`, `max`, `avg`. | | compute | interval | int64 | A time interval in milliseconds. | | compute | metric | string | Measurable attribute to compute. | | compute | name | string | The name assigned to this aggregation, when multiple aggregations are defined for a query. | | compute | source | string | Source reference for composite query payloads. | | Object 1 | data_source [*required*] | enum | Data source for event platform-based queries. Allowed enum values: `rum`, `ci_pipelines`, `ci_tests`, `audit`, `events`, `logs`, `spans`, `database_queries`, `network`, `network_path`. | | Object 1 | group_by | [object] | Group by options. | | group_by | facet [*required*] | string | Event facet. | | group_by | limit | int64 | Number of groups to return. | | group_by | sort | object | Options for sorting group by results. | | sort | aggregation [*required*] | enum | Aggregation methods for event platform queries. Allowed enum values: `count`, `cardinality`, `median`, `pc75`, `pc90`, `pc95`, `pc98`, `pc99`, `sum`, `min`, `max`, `avg`. | | sort | metric | string | Metric used for sorting group by results. | | sort | order | enum | Direction of sort. Allowed enum values: `asc`, `desc`. Default: `desc`. | | group_by | source | string | Source reference for composite query payloads. | | Object 1 | indexes | [string] | An array of index names to query in the stream. Omit or use `[]` to query all indexes at once. | | Object 1 | name [*required*] | string | Name of the query for use in formulas. | | Object 1 | search | object | Search options. | | search | query [*required*] | string | Events search string. | | base_query | Object 2 | object | A formula and functions metrics query for use in aggregate queries. | | Object 2 | aggregator | enum | Aggregator for metrics queries. Allowed enum values: `avg`, `min`, `max`, `sum`, `last`, `mean`, `area`, `l2norm`, `percentile`, `stddev`, `count_unique`. | | Object 2 | data_source [*required*] | enum | Data source for metrics queries. Allowed enum values: `metrics`, `cloud_cost`, `datadog_usage`. | | Object 2 | name | string | Name of the query for use in formulas. | | Object 2 | query [*required*] | string | The metrics query definition. | | Object 6 | compute | [object] | Compute options for the query. | | compute | aggregation [*required*] | enum | Aggregation methods for event platform queries. Allowed enum values: `count`, `cardinality`, `median`, `pc75`, `pc90`, `pc95`, `pc98`, `pc99`, `sum`, `min`, `max`, `avg`. | | compute | interval | int64 | A time interval in milliseconds. | | compute | metric | string | Measurable attribute to compute. | | compute | name | string | The name assigned to this aggregation, when multiple aggregations are defined for a query. | | compute | source | string | Source reference for composite query payloads. | | Object 6 | data_source [*required*] | enum | Data source for aggregate filtered queries. Allowed enum values: `aggregate_filtered_query`. | | Object 6 | filter_query [*required*] | | Filter query for aggregate filtered queries. Can be an events query or a reference table query. | | filter_query | Object 1 | object | A formula and functions events query. | | Object 1 | compute [*required*] | object | Compute options. | | compute | aggregation [*required*] | enum | Aggregation methods for event platform queries. Allowed enum values: `count`, `cardinality`, `median`, `pc75`, `pc90`, `pc95`, `pc98`, `pc99`, `sum`, `min`, `max`, `avg`. | | compute | interval | int64 | A time interval in milliseconds. | | compute | metric | string | Measurable attribute to compute. | | compute | name | string | The name assigned to this aggregation, when multiple aggregations are defined for a query. | | compute | source | string | Source reference for composite query payloads. | | Object 1 | data_source [*required*] | enum | Data source for event platform-based queries. Allowed enum values: `rum`, `ci_pipelines`, `ci_tests`, `audit`, `events`, `logs`, `spans`, `database_queries`, `network`, `network_path`. | | Object 1 | group_by | [object] | Group by options. | | group_by | facet [*required*] | string | Event facet. | | group_by | limit | int64 | Number of groups to return. | | group_by | sort | object | Options for sorting group by results. | | sort | aggregation [*required*] | enum | Aggregation methods for event platform queries. Allowed enum values: `count`, `cardinality`, `median`, `pc75`, `pc90`, `pc95`, `pc98`, `pc99`, `sum`, `min`, `max`, `avg`. | | sort | metric | string | Metric used for sorting group by results. | | sort | order | enum | Direction of sort. Allowed enum values: `asc`, `desc`. Default: `desc`. | | group_by | source | string | Source reference for composite query payloads. | | Object 1 | indexes | [string] | An array of index names to query in the stream. Omit or use `[]` to query all indexes at once. | | Object 1 | name [*required*] | string | Name of the query for use in formulas. | | Object 1 | search | object | Search options. | | search | query [*required*] | string | Events search string. | | filter_query | | object | A reference table query for use in aggregate queries. | | | columns | [object] | List of columns to retrieve from the reference table. | | columns | alias | string | Optional alias for the column. | | columns | name [*required*] | string | Name of the column. | | | data_source [*required*] | enum | Data source for reference table queries. Allowed enum values: `reference_table`. | | | name | string | Name of the query. | | | query_filter | string | Optional filter expression for the reference table query. | | | table_name [*required*] | string | Name of the reference table. | | Object 6 | filters [*required*] | [object] | Filter conditions for the query. | | filters | base_attribute [*required*] | string | Attribute from the base query to filter on. | | filters | exclude | boolean | Whether to exclude matching records instead of including them. Default: `false`. | | filters | filter_attribute [*required*] | string | Attribute from the filter query to match against. | | Object 6 | group_by | [object] | Group by options for the query. | | group_by | facet [*required*] | string | Event facet. | | group_by | limit | int64 | Number of groups to return. | | group_by | sort | object | Options for sorting group by results. | | sort | aggregation [*required*] | enum | Aggregation methods for event platform queries. Allowed enum values: `count`, `cardinality`, `median`, `pc75`, `pc90`, `pc95`, `pc98`, `pc99`, `sum`, `min`, `max`, `avg`. | | sort | metric | string | Metric used for sorting group by results. | | sort | order | enum | Direction of sort. Allowed enum values: `asc`, `desc`. Default: `desc`. | | group_by | source | string | Source reference for composite query payloads. | | Object 6 | name | string | Name of the query for use in formulas. | | | overall_state | enum | The different states your monitor can be in. Read-only. Allowed enum values: `Alert`, `Ignored`, `No Data`, `OK`, `Skipped`, `Unknown`, `Warn`. | | | priority | int64 | Integer from 1 (high) to 5 (low) indicating alert severity. | | | query [*required*] | string | The monitor query. | | | restricted_roles | [string] | A list of unique role identifiers to define which roles are allowed to edit the monitor. The unique identifiers for all roles can be pulled from the [Roles API](https://docs.datadoghq.com/api/latest/roles.md#list-roles) and are located in the `data.id` field. Editing a monitor includes any updates to the monitor configuration, monitor deletion, and muting of the monitor for any amount of time. You can use the [Restriction Policies API](https://docs.datadoghq.com/api/latest/restriction-policies.md) to manage write authorization for individual monitors by teams and users, in addition to roles. | | | state | object | Wrapper object with the different monitor states. Read-only. | | state | groups | object | Dictionary where the keys are groups (comma separated lists of tags) and the values are the list of groups your monitor is broken down on. | | additionalProperties | | object | Monitor state for a single group. | | | last_nodata_ts | int64 | Latest timestamp the monitor was in NO_DATA state. | | | last_notified_ts | int64 | Latest timestamp of the notification sent for this monitor group. | | | last_resolved_ts | int64 | Latest timestamp the monitor group was resolved. | | | last_triggered_ts | int64 | Latest timestamp the monitor group triggered. | | | name | string | The name of the monitor. | | | status | enum | The different states your monitor can be in. Read-only. Allowed enum values: `Alert`, `Ignored`, `No Data`, `OK`, `Skipped`, `Unknown`, `Warn`. | | | tags | [string] | Tags associated to your monitor. | | | type [*required*] | enum | The type of the monitor. For more information about `type`, see the [monitor options](https://docs.datadoghq.com/monitors/guide/monitor_api_options.md) docs. Allowed enum values: `composite`, `event alert`, `log alert`, `metric alert`, `process alert`, `query alert`, `rum alert`, `service check`, `synthetics alert`, `trace-analytics alert`, `slo alert`, `event-v2 alert`, `audit alert`, `ci-pipelines alert`, `ci-tests alert`, `error-tracking alert`, `database-monitoring alert`, `network-performance alert`, `cost alert`, `data-quality alert`, `network-path alert`, `data-jobs alert`, `llm-observability alert`. | {% /tab %} {% tab label="Example" %} ```json { "assets": [ { "category": "runbook", "name": "Monitor Runbook", "resource_key": "12345", "resource_type": "string", "url": "/notebooks/12345" } ], "created": "2019-09-19T10:00:00.000Z", "creator": { "email": "string", "handle": "string", "name": "string" }, "deleted": "2019-09-19T10:00:00.000Z", "draft_status": "string", "id": "integer", "matching_downtimes": [ { "end": 1412792983, "id": 1625, "scope": [ "env:staging" ], "start": 1412792983 } ], "message": "string", "modified": "2019-09-19T10:00:00.000Z", "multi": false, "name": "My monitor", "options": { "aggregation": { "group_by": "host", "metric": "metrics.name", "type": "count" }, "device_ids": [], "enable_logs_sample": false, "enable_samples": false, "escalation_message": "string", "evaluation_delay": "integer", "group_retention_duration": "string", "groupby_simple_monitor": false, "include_tags": false, "locked": false, "min_failure_duration": "integer", "min_location_failed": "integer", "new_group_delay": "integer", "new_host_delay": "integer", "no_data_timeframe": "integer", "notification_preset_name": "string", "notify_audit": false, "notify_by": [], "notify_no_data": false, "on_missing_data": "string", "renotify_interval": "integer", "renotify_occurrences": "integer", "renotify_statuses": [], "require_full_window": false, "scheduling_options": { "custom_schedule": { "recurrences": [ { "rrule": "FREQ=WEEKLY;BYDAY=MO,TU,WE,TH,FR", "start": "2023-08-31T16:30:00", "timezone": "Europe/Paris" } ] }, "evaluation_window": { "day_starts": "04:00", "hour_starts": 0, "month_starts": 1, "timezone": "Europe/Paris" } }, "silenced": { "": "integer" }, "synthetics_check_id": "string", "threshold_windows": { "recovery_window": "string", "trigger_window": "string" }, "thresholds": { "critical": "number", "critical_query": "formula(\"2 * query1\").rollup(\"avg\").last(\"6mo\")", "critical_recovery": "number", "critical_recovery_query": "formula(\"1.5 * query1\").rollup(\"avg\").last(\"3mo\")", "ok": "number", "unknown": "number", "warning": "number", "warning_recovery": "number" }, "timeout_h": "integer", "variables": [ { "compute": { "aggregation": "avg", "interval": 60000, "metric": "@duration", "name": "compute_result", "source": "filter_query" }, "data_source": "rum", "group_by": [ { "facet": "status", "limit": 10, "sort": { "aggregation": "avg", "metric": "string", "order": "asc" }, "source": "filter_query" } ], "indexes": [ "days-3", "days-7" ], "name": "query_errors", "search": { "query": "service:query" } } ] }, "overall_state": "string", "priority": "integer", "query": "avg(last_5m):sum:system.net.bytes_rcvd{host:host0} > 100", "restricted_roles": [], "state": { "groups": { "": { "last_nodata_ts": "integer", "last_notified_ts": "integer", "last_resolved_ts": "integer", "last_triggered_ts": "integer", "name": "string", "status": "string" } } }, "tags": [], "type": "query alert" } ``` {% /tab %} {% /tabs %} {% /tab %} {% tab label="400" %} Bad Request {% tabs %} {% tab label="Model" %} Error response object. | Field | Type | Description | | ------------------- | -------- | ------------------------------------ | | errors [*required*] | [string] | Array of errors returned by the API. | {% /tab %} {% tab label="Example" %} ```json { "errors": [ "Bad Request" ] } ``` {% /tab %} {% /tabs %} {% /tab %} {% tab label="403" %} Forbidden {% tabs %} {% tab label="Model" %} Error response object. | Field | Type | Description | | ------------------- | -------- | ------------------------------------ | | errors [*required*] | [string] | Array of errors returned by the API. | {% /tab %} {% tab label="Example" %} ```json { "errors": [ "Bad Request" ] } ``` {% /tab %} {% /tabs %} {% /tab %} {% tab label="429" %} Too many requests {% tabs %} {% tab label="Model" %} Error response object. | Field | Type | Description | | ------------------- | -------- | ------------------------------------ | | errors [*required*] | [string] | Array of errors returned by the API. | {% /tab %} {% tab label="Example" %} ```json { "errors": [ "Bad Request" ] } ``` {% /tab %} {% /tabs %} {% /tab %} {% /tabs %} ### Code Example {% tabs %} {% tab label="Curl" %} ```bash # Set your Datadog site and credentials export DD_SITE="datadoghq.com" # Or us3.datadoghq.com, us5.datadoghq.com, datadoghq.eu, ap1.datadoghq.com, ap2.datadoghq.com, uk1.datadoghq.com, ddog-gov.com, us2.ddog-gov.com # Use a Personal Access Token or Service Access Token export DD_BEARER_TOKEN="" curl -X POST "https://api.${DD_SITE}/api/v1/monitor" \ -H "Accept: application/json" \ -H "Content-Type: application/json" \ -H "Authorization: Bearer ${DD_BEARER_TOKEN}" \ -d @- << EOF { "name": "Example Monitor", "type": "cost alert", "query": "formula(\"exclude_null(query1)\").last(\"7d\").anomaly(direction=\"above\", threshold=10) >= 5", "message": "some message Notify: @hipchat-channel", "tags": [ "test:examplemonitor", "env:ci" ], "priority": 3, "options": { "thresholds": { "critical": 5, "warning": 3 }, "variables": [ { "data_source": "cloud_cost", "query": "sum:aws.cost.net.amortized.shared.resources.allocated{aws_product IN (amplify ,athena, backup, bedrock ) } by {aws_product}.rollup(sum, 86400)", "name": "query1", "aggregator": "sum" } ], "include_tags": true } } EOF ``` ```bash # Set your Datadog site and credentials export DD_SITE="datadoghq.com" # Or us3.datadoghq.com, us5.datadoghq.com, datadoghq.eu, ap1.datadoghq.com, ap2.datadoghq.com, uk1.datadoghq.com, ddog-gov.com, us2.ddog-gov.com # Use a Personal Access Token or Service Access Token export DD_BEARER_TOKEN="" curl -X POST "https://api.${DD_SITE}/api/v1/monitor" \ -H "Accept: application/json" \ -H "Content-Type: application/json" \ -H "Authorization: Bearer ${DD_BEARER_TOKEN}" \ -d @- << EOF { "name": "Example-Monitor", "type": "data-jobs alert", "query": "formula(\"failed_runs(run_query)\").by(job_name,workspace_name).last(10d) > 0", "message": "Data jobs alert triggered", "tags": [ "test:examplemonitor", "env:ci" ], "options": { "thresholds": { "critical": 0 }, "variables": [ { "name": "run_query", "jobs_query": "job_name:*", "job_type": "databricks.job", "query_dialect": "metric" } ] } } EOF ``` ```bash # Set your Datadog site and credentials export DD_SITE="datadoghq.com" # Or us3.datadoghq.com, us5.datadoghq.com, datadoghq.eu, ap1.datadoghq.com, ap2.datadoghq.com, uk1.datadoghq.com, ddog-gov.com, us2.ddog-gov.com # Use a Personal Access Token or Service Access Token export DD_BEARER_TOKEN="" curl -X POST "https://api.${DD_SITE}/api/v1/monitor" \ -H "Accept: application/json" \ -H "Content-Type: application/json" \ -H "Authorization: Bearer ${DD_BEARER_TOKEN}" \ -d @- << EOF { "name": "Example-Monitor", "type": "data-quality alert", "query": "formula(\"query1\").last(\"5m\") > 100", "message": "Data quality alert triggered", "tags": [ "test:examplemonitor", "env:ci" ], "priority": 3, "options": { "thresholds": { "critical": 100 }, "variables": [ { "name": "query1", "data_source": "data_quality_metrics", "measure": "row_count", "filter": "search for column where `database:production AND table:users`", "group_by": [ "entity_id" ] } ] } } EOF ``` {% /tab %} {% tab label="Go" %} ```go // Create a Cost Monitor returns "OK" response package main import ( "context" "encoding/json" "fmt" "os" "github.com/DataDog/datadog-api-client-go/v2/api/datadog" "github.com/DataDog/datadog-api-client-go/v2/api/datadogV1" ) func main() { body := datadogV1.Monitor{ Name: datadog.PtrString("Example Monitor"), Type: datadogV1.MONITORTYPE_COST_ALERT, Query: `formula("exclude_null(query1)").last("7d").anomaly(direction="above", threshold=10) >= 5`, Message: datadog.PtrString("some message Notify: @hipchat-channel"), Tags: []string{ "test:examplemonitor", "env:ci", }, Priority: *datadog.NewNullableInt64(datadog.PtrInt64(3)), Options: &datadogV1.MonitorOptions{ Thresholds: &datadogV1.MonitorThresholds{ Critical: datadog.PtrFloat64(5), Warning: *datadog.NewNullableFloat64(datadog.PtrFloat64(3)), }, Variables: []datadogV1.MonitorFormulaAndFunctionQueryDefinition{ datadogV1.MonitorFormulaAndFunctionQueryDefinition{ MonitorFormulaAndFunctionCostQueryDefinition: &datadogV1.MonitorFormulaAndFunctionCostQueryDefinition{ DataSource: datadogV1.MONITORFORMULAANDFUNCTIONCOSTDATASOURCE_CLOUD_COST, Query: "sum:aws.cost.net.amortized.shared.resources.allocated{aws_product IN (amplify ,athena, backup, bedrock ) } by {aws_product}.rollup(sum, 86400)", Name: "query1", Aggregator: datadogV1.MONITORFORMULAANDFUNCTIONCOSTAGGREGATOR_SUM.Ptr(), }}, }, IncludeTags: datadog.PtrBool(true), }, } ctx := datadog.NewDefaultContext(context.Background()) ctx = context.WithValue(ctx, datadog.ContextAccessToken, os.Getenv("DD_BEARER_TOKEN")) configuration := datadog.NewConfiguration() apiClient := datadog.NewAPIClient(configuration) api := datadogV1.NewMonitorsApi(apiClient) resp, r, err := api.CreateMonitor(ctx, body) if err != nil { fmt.Fprintf(os.Stderr, "Error when calling `MonitorsApi.CreateMonitor`: %v\n", err) fmt.Fprintf(os.Stderr, "Full HTTP response: %v\n", r) } responseContent, _ := json.MarshalIndent(resp, "", " ") fmt.Fprintf(os.Stdout, "Response from `MonitorsApi.CreateMonitor`:\n%s\n", responseContent) } ``` ```go // Create a Data Jobs monitor returns "OK" response package main import ( "context" "encoding/json" "fmt" "os" "github.com/DataDog/datadog-api-client-go/v2/api/datadog" "github.com/DataDog/datadog-api-client-go/v2/api/datadogV1" ) func main() { body := datadogV1.Monitor{ Name: datadog.PtrString("Example-Monitor"), Type: datadogV1.MONITORTYPE_DATA_JOBS_ALERT, Query: `formula("failed_runs(run_query)").by(job_name,workspace_name).last(10d) > 0`, Message: datadog.PtrString("Data jobs alert triggered"), Tags: []string{ "test:examplemonitor", "env:ci", }, Options: &datadogV1.MonitorOptions{ Thresholds: &datadogV1.MonitorThresholds{ Critical: datadog.PtrFloat64(0), }, Variables: []datadogV1.MonitorFormulaAndFunctionQueryDefinition{ datadogV1.MonitorFormulaAndFunctionQueryDefinition{ MonitorFormulaAndFunctionDataJobsQueryDefinition: &datadogV1.MonitorFormulaAndFunctionDataJobsQueryDefinition{ Name: "run_query", JobsQuery: "job_name:*", JobType: "databricks.job", QueryDialect: "metric", }}, }, }, } ctx := datadog.NewDefaultContext(context.Background()) ctx = context.WithValue(ctx, datadog.ContextAccessToken, os.Getenv("DD_BEARER_TOKEN")) configuration := datadog.NewConfiguration() apiClient := datadog.NewAPIClient(configuration) api := datadogV1.NewMonitorsApi(apiClient) resp, r, err := api.CreateMonitor(ctx, body) if err != nil { fmt.Fprintf(os.Stderr, "Error when calling `MonitorsApi.CreateMonitor`: %v\n", err) fmt.Fprintf(os.Stderr, "Full HTTP response: %v\n", r) } responseContent, _ := json.MarshalIndent(resp, "", " ") fmt.Fprintf(os.Stdout, "Response from `MonitorsApi.CreateMonitor`:\n%s\n", responseContent) } ``` ```go // Create a Data Quality monitor returns "OK" response package main import ( "context" "encoding/json" "fmt" "os" "github.com/DataDog/datadog-api-client-go/v2/api/datadog" "github.com/DataDog/datadog-api-client-go/v2/api/datadogV1" ) func main() { body := datadogV1.Monitor{ Name: datadog.PtrString("Example-Monitor"), Type: datadogV1.MONITORTYPE_DATA_QUALITY_ALERT, Query: `formula("query1").last("5m") > 100`, Message: datadog.PtrString("Data quality alert triggered"), Tags: []string{ "test:examplemonitor", "env:ci", }, Priority: *datadog.NewNullableInt64(datadog.PtrInt64(3)), Options: &datadogV1.MonitorOptions{ Thresholds: &datadogV1.MonitorThresholds{ Critical: datadog.PtrFloat64(100), }, Variables: []datadogV1.MonitorFormulaAndFunctionQueryDefinition{ datadogV1.MonitorFormulaAndFunctionQueryDefinition{ MonitorFormulaAndFunctionDataQualityQueryDefinition: &datadogV1.MonitorFormulaAndFunctionDataQualityQueryDefinition{ Name: "query1", DataSource: datadogV1.MONITORFORMULAANDFUNCTIONDATAQUALITYDATASOURCE_DATA_QUALITY_METRICS, Measure: "row_count", Filter: `search for column where ` + "`" + `database:production AND table:users` + "`", GroupBy: []string{ "entity_id", }, }}, }, }, } ctx := datadog.NewDefaultContext(context.Background()) ctx = context.WithValue(ctx, datadog.ContextAccessToken, os.Getenv("DD_BEARER_TOKEN")) configuration := datadog.NewConfiguration() apiClient := datadog.NewAPIClient(configuration) api := datadogV1.NewMonitorsApi(apiClient) resp, r, err := api.CreateMonitor(ctx, body) if err != nil { fmt.Fprintf(os.Stderr, "Error when calling `MonitorsApi.CreateMonitor`: %v\n", err) fmt.Fprintf(os.Stderr, "Full HTTP response: %v\n", r) } responseContent, _ := json.MarshalIndent(resp, "", " ") fmt.Fprintf(os.Stdout, "Response from `MonitorsApi.CreateMonitor`:\n%s\n", responseContent) } ``` #### Instructions First [install the library and its dependencies](https://dnd37xeb23o8n.cloudfront.net/api/latest.md?code-lang=go) and then save the example to `main.go` and run following commands: ```bash DD_SITE="datadoghq.com" DD_BEARER_TOKEN="" go run "main.go" ``` {% /tab %} {% tab label="Java" %} ```java // Create a Cost Monitor returns "OK" response import com.datadog.api.client.ApiClient; import com.datadog.api.client.ApiException; import com.datadog.api.client.v1.api.MonitorsApi; import com.datadog.api.client.v1.model.Monitor; import com.datadog.api.client.v1.model.MonitorFormulaAndFunctionCostAggregator; import com.datadog.api.client.v1.model.MonitorFormulaAndFunctionCostDataSource; import com.datadog.api.client.v1.model.MonitorFormulaAndFunctionCostQueryDefinition; import com.datadog.api.client.v1.model.MonitorFormulaAndFunctionQueryDefinition; import com.datadog.api.client.v1.model.MonitorOptions; import com.datadog.api.client.v1.model.MonitorThresholds; import com.datadog.api.client.v1.model.MonitorType; import java.util.Arrays; import java.util.Collections; public class Example { public static void main(String[] args) { ApiClient defaultClient = ApiClient.getDefaultApiClient(); defaultClient.setAccessToken(System.getenv("DD_BEARER_TOKEN")); MonitorsApi apiInstance = new MonitorsApi(defaultClient); Monitor body = new Monitor() .name("Example Monitor") .type(MonitorType.COST_ALERT) .query( """ formula("exclude_null(query1)").last("7d").anomaly(direction="above", threshold=10) >= 5 """) .message("some message Notify: @hipchat-channel") .tags(Arrays.asList("test:examplemonitor", "env:ci")) .priority(3L) .options( new MonitorOptions() .thresholds(new MonitorThresholds().critical(5.0).warning(3.0)) .variables( Collections.singletonList( new MonitorFormulaAndFunctionQueryDefinition( new MonitorFormulaAndFunctionCostQueryDefinition() .dataSource(MonitorFormulaAndFunctionCostDataSource.CLOUD_COST) .query( "sum:aws.cost.net.amortized.shared.resources.allocated{aws_product" + " IN (amplify ,athena, backup, bedrock ) } by" + " {aws_product}.rollup(sum, 86400)") .name("query1") .aggregator(MonitorFormulaAndFunctionCostAggregator.SUM)))) .includeTags(true)); try { Monitor result = apiInstance.createMonitor(body); System.out.println(result); } catch (ApiException e) { System.err.println("Exception when calling MonitorsApi#createMonitor"); System.err.println("Status code: " + e.getCode()); System.err.println("Reason: " + e.getResponseBody()); System.err.println("Response headers: " + e.getResponseHeaders()); e.printStackTrace(); } } } ``` ```java // Create a Data Jobs monitor returns "OK" response import com.datadog.api.client.ApiClient; import com.datadog.api.client.ApiException; import com.datadog.api.client.v1.api.MonitorsApi; import com.datadog.api.client.v1.model.Monitor; import com.datadog.api.client.v1.model.MonitorFormulaAndFunctionDataJobsQueryDefinition; import com.datadog.api.client.v1.model.MonitorFormulaAndFunctionQueryDefinition; import com.datadog.api.client.v1.model.MonitorOptions; import com.datadog.api.client.v1.model.MonitorThresholds; import com.datadog.api.client.v1.model.MonitorType; import java.util.Arrays; import java.util.Collections; public class Example { public static void main(String[] args) { ApiClient defaultClient = ApiClient.getDefaultApiClient(); defaultClient.setAccessToken(System.getenv("DD_BEARER_TOKEN")); MonitorsApi apiInstance = new MonitorsApi(defaultClient); Monitor body = new Monitor() .name("Example-Monitor") .type(MonitorType.DATA_JOBS_ALERT) .query( """ formula("failed_runs(run_query)").by(job_name,workspace_name).last(10d) > 0 """) .message("Data jobs alert triggered") .tags(Arrays.asList("test:examplemonitor", "env:ci")) .options( new MonitorOptions() .thresholds(new MonitorThresholds()) .variables( Collections.singletonList( new MonitorFormulaAndFunctionQueryDefinition( new MonitorFormulaAndFunctionDataJobsQueryDefinition() .name("run_query") .jobsQuery("job_name:*") .jobType("databricks.job") .queryDialect("metric"))))); try { Monitor result = apiInstance.createMonitor(body); System.out.println(result); } catch (ApiException e) { System.err.println("Exception when calling MonitorsApi#createMonitor"); System.err.println("Status code: " + e.getCode()); System.err.println("Reason: " + e.getResponseBody()); System.err.println("Response headers: " + e.getResponseHeaders()); e.printStackTrace(); } } } ``` ```java // Create a Data Quality monitor returns "OK" response import com.datadog.api.client.ApiClient; import com.datadog.api.client.ApiException; import com.datadog.api.client.v1.api.MonitorsApi; import com.datadog.api.client.v1.model.Monitor; import com.datadog.api.client.v1.model.MonitorFormulaAndFunctionDataQualityDataSource; import com.datadog.api.client.v1.model.MonitorFormulaAndFunctionDataQualityQueryDefinition; import com.datadog.api.client.v1.model.MonitorFormulaAndFunctionQueryDefinition; import com.datadog.api.client.v1.model.MonitorOptions; import com.datadog.api.client.v1.model.MonitorThresholds; import com.datadog.api.client.v1.model.MonitorType; import java.util.Arrays; import java.util.Collections; public class Example { public static void main(String[] args) { ApiClient defaultClient = ApiClient.getDefaultApiClient(); defaultClient.setAccessToken(System.getenv("DD_BEARER_TOKEN")); MonitorsApi apiInstance = new MonitorsApi(defaultClient); Monitor body = new Monitor() .name("Example-Monitor") .type(MonitorType.DATA_QUALITY_ALERT) .query(""" formula("query1").last("5m") > 100 """) .message("Data quality alert triggered") .tags(Arrays.asList("test:examplemonitor", "env:ci")) .priority(3L) .options( new MonitorOptions() .thresholds(new MonitorThresholds().critical(100.0)) .variables( Collections.singletonList( new MonitorFormulaAndFunctionQueryDefinition( new MonitorFormulaAndFunctionDataQualityQueryDefinition() .name("query1") .dataSource( MonitorFormulaAndFunctionDataQualityDataSource .DATA_QUALITY_METRICS) .measure("row_count") .filter( "search for column where `database:production AND" + " table:users`") .groupBy(Collections.singletonList("entity_id")))))); try { Monitor result = apiInstance.createMonitor(body); System.out.println(result); } catch (ApiException e) { System.err.println("Exception when calling MonitorsApi#createMonitor"); System.err.println("Status code: " + e.getCode()); System.err.println("Reason: " + e.getResponseBody()); System.err.println("Response headers: " + e.getResponseHeaders()); e.printStackTrace(); } } } ``` #### Instructions First [install the library and its dependencies](https://dnd37xeb23o8n.cloudfront.net/api/latest.md?code-lang=java) and then save the example to `Example.java` and run following commands: ```bash DD_SITE="datadoghq.com" DD_BEARER_TOKEN="" java "Example.java" ``` {% /tab %} {% tab label="Python" %} ```python """ Create a Cost Monitor returns "OK" response """ from os import environ from datadog_api_client import ApiClient, Configuration from datadog_api_client.v1.api.monitors_api import MonitorsApi from datadog_api_client.v1.model.monitor import Monitor from datadog_api_client.v1.model.monitor_formula_and_function_cost_aggregator import ( MonitorFormulaAndFunctionCostAggregator, ) from datadog_api_client.v1.model.monitor_formula_and_function_cost_data_source import ( MonitorFormulaAndFunctionCostDataSource, ) from datadog_api_client.v1.model.monitor_formula_and_function_cost_query_definition import ( MonitorFormulaAndFunctionCostQueryDefinition, ) from datadog_api_client.v1.model.monitor_options import MonitorOptions from datadog_api_client.v1.model.monitor_thresholds import MonitorThresholds from datadog_api_client.v1.model.monitor_type import MonitorType body = Monitor( name="Example Monitor", type=MonitorType.COST_ALERT, query='formula("exclude_null(query1)").last("7d").anomaly(direction="above", threshold=10) >= 5', message="some message Notify: @hipchat-channel", tags=[ "test:examplemonitor", "env:ci", ], priority=3, options=MonitorOptions( thresholds=MonitorThresholds( critical=5.0, warning=3.0, ), variables=[ MonitorFormulaAndFunctionCostQueryDefinition( data_source=MonitorFormulaAndFunctionCostDataSource.CLOUD_COST, query="sum:aws.cost.net.amortized.shared.resources.allocated{aws_product IN (amplify ,athena, backup, bedrock ) } by {aws_product}.rollup(sum, 86400)", name="query1", aggregator=MonitorFormulaAndFunctionCostAggregator.SUM, ), ], include_tags=True, ), ) configuration = Configuration() configuration.access_token = environ["DD_BEARER_TOKEN"] with ApiClient(configuration) as api_client: api_instance = MonitorsApi(api_client) response = api_instance.create_monitor(body=body) print(response) ``` ```python """ Create a Data Jobs monitor returns "OK" response """ from os import environ from datadog_api_client import ApiClient, Configuration from datadog_api_client.v1.api.monitors_api import MonitorsApi from datadog_api_client.v1.model.monitor import Monitor from datadog_api_client.v1.model.monitor_formula_and_function_data_jobs_query_definition import ( MonitorFormulaAndFunctionDataJobsQueryDefinition, ) from datadog_api_client.v1.model.monitor_options import MonitorOptions from datadog_api_client.v1.model.monitor_thresholds import MonitorThresholds from datadog_api_client.v1.model.monitor_type import MonitorType body = Monitor( name="Example-Monitor", type=MonitorType.DATA_JOBS_ALERT, query='formula("failed_runs(run_query)").by(job_name,workspace_name).last(10d) > 0', message="Data jobs alert triggered", tags=[ "test:examplemonitor", "env:ci", ], options=MonitorOptions( thresholds=MonitorThresholds( critical=0.0, ), variables=[ MonitorFormulaAndFunctionDataJobsQueryDefinition( name="run_query", jobs_query="job_name:*", job_type="databricks.job", query_dialect="metric", ), ], ), ) configuration = Configuration() configuration.access_token = environ["DD_BEARER_TOKEN"] with ApiClient(configuration) as api_client: api_instance = MonitorsApi(api_client) response = api_instance.create_monitor(body=body) print(response) ``` ```python """ Create a Data Quality monitor returns "OK" response """ from os import environ from datadog_api_client import ApiClient, Configuration from datadog_api_client.v1.api.monitors_api import MonitorsApi from datadog_api_client.v1.model.monitor import Monitor from datadog_api_client.v1.model.monitor_formula_and_function_data_quality_data_source import ( MonitorFormulaAndFunctionDataQualityDataSource, ) from datadog_api_client.v1.model.monitor_formula_and_function_data_quality_query_definition import ( MonitorFormulaAndFunctionDataQualityQueryDefinition, ) from datadog_api_client.v1.model.monitor_options import MonitorOptions from datadog_api_client.v1.model.monitor_thresholds import MonitorThresholds from datadog_api_client.v1.model.monitor_type import MonitorType body = Monitor( name="Example-Monitor", type=MonitorType.DATA_QUALITY_ALERT, query='formula("query1").last("5m") > 100', message="Data quality alert triggered", tags=[ "test:examplemonitor", "env:ci", ], priority=3, options=MonitorOptions( thresholds=MonitorThresholds( critical=100.0, ), variables=[ MonitorFormulaAndFunctionDataQualityQueryDefinition( name="query1", data_source=MonitorFormulaAndFunctionDataQualityDataSource.DATA_QUALITY_METRICS, measure="row_count", filter="search for column where `database:production AND table:users`", group_by=[ "entity_id", ], ), ], ), ) configuration = Configuration() configuration.access_token = environ["DD_BEARER_TOKEN"] with ApiClient(configuration) as api_client: api_instance = MonitorsApi(api_client) response = api_instance.create_monitor(body=body) print(response) ``` #### Instructions First [install the library and its dependencies](https://dnd37xeb23o8n.cloudfront.net/api/latest.md?code-lang=python) and then save the example to `example.py` and run following commands: ```bash DD_SITE="datadoghq.com" DD_BEARER_TOKEN="" python3 "example.py" ``` {% /tab %} {% tab label="Ruby" %} ```ruby # Create a Cost Monitor returns "OK" response require "datadog_api_client" DatadogAPIClient.configure do |config| config.access_token = ENV["DD_BEARER_TOKEN"] end api_instance = DatadogAPIClient::V1::MonitorsAPI.new body = DatadogAPIClient::V1::Monitor.new({ name: "Example Monitor", type: DatadogAPIClient::V1::MonitorType::COST_ALERT, query: 'formula("exclude_null(query1)").last("7d").anomaly(direction="above", threshold=10) >= 5', message: "some message Notify: @hipchat-channel", tags: [ "test:examplemonitor", "env:ci", ], priority: 3, options: DatadogAPIClient::V1::MonitorOptions.new({ thresholds: DatadogAPIClient::V1::MonitorThresholds.new({ critical: 5, warning: 3, }), variables: [ DatadogAPIClient::V1::MonitorFormulaAndFunctionCostQueryDefinition.new({ data_source: DatadogAPIClient::V1::MonitorFormulaAndFunctionCostDataSource::CLOUD_COST, query: "sum:aws.cost.net.amortized.shared.resources.allocated{aws_product IN (amplify ,athena, backup, bedrock ) } by {aws_product}.rollup(sum, 86400)", name: "query1", aggregator: DatadogAPIClient::V1::MonitorFormulaAndFunctionCostAggregator::SUM, }), ], include_tags: true, }), }) p api_instance.create_monitor(body) ``` ```ruby # Create a Data Jobs monitor returns "OK" response require "datadog_api_client" DatadogAPIClient.configure do |config| config.access_token = ENV["DD_BEARER_TOKEN"] end api_instance = DatadogAPIClient::V1::MonitorsAPI.new body = DatadogAPIClient::V1::Monitor.new({ name: "Example-Monitor", type: DatadogAPIClient::V1::MonitorType::DATA_JOBS_ALERT, query: 'formula("failed_runs(run_query)").by(job_name,workspace_name).last(10d) > 0', message: "Data jobs alert triggered", tags: [ "test:examplemonitor", "env:ci", ], options: DatadogAPIClient::V1::MonitorOptions.new({ thresholds: DatadogAPIClient::V1::MonitorThresholds.new({ critical: 0, }), variables: [ DatadogAPIClient::V1::MonitorFormulaAndFunctionDataJobsQueryDefinition.new({ name: "run_query", jobs_query: "job_name:*", job_type: "databricks.job", query_dialect: "metric", }), ], }), }) p api_instance.create_monitor(body) ``` ```ruby # Create a Data Quality monitor returns "OK" response require "datadog_api_client" DatadogAPIClient.configure do |config| config.access_token = ENV["DD_BEARER_TOKEN"] end api_instance = DatadogAPIClient::V1::MonitorsAPI.new body = DatadogAPIClient::V1::Monitor.new({ name: "Example-Monitor", type: DatadogAPIClient::V1::MonitorType::DATA_QUALITY_ALERT, query: 'formula("query1").last("5m") > 100', message: "Data quality alert triggered", tags: [ "test:examplemonitor", "env:ci", ], priority: 3, options: DatadogAPIClient::V1::MonitorOptions.new({ thresholds: DatadogAPIClient::V1::MonitorThresholds.new({ critical: 100, }), variables: [ DatadogAPIClient::V1::MonitorFormulaAndFunctionDataQualityQueryDefinition.new({ name: "query1", data_source: DatadogAPIClient::V1::MonitorFormulaAndFunctionDataQualityDataSource::DATA_QUALITY_METRICS, measure: "row_count", filter: "search for column where `database:production AND table:users`", group_by: [ "entity_id", ], }), ], }), }) p api_instance.create_monitor(body) ``` #### Instructions First [install the library and its dependencies](https://dnd37xeb23o8n.cloudfront.net/api/latest.md?code-lang=ruby) and then save the example to `example.rb` and run following commands: ```bash DD_SITE="datadoghq.com" DD_BEARER_TOKEN="" rb "example.rb" ``` {% /tab %} {% tab label="Rust" %} ```rust // Create a Cost Monitor returns "OK" response use datadog_api_client::datadog; use datadog_api_client::datadogV1::api_monitors::MonitorsAPI; use datadog_api_client::datadogV1::model::Monitor; use datadog_api_client::datadogV1::model::MonitorFormulaAndFunctionCostAggregator; use datadog_api_client::datadogV1::model::MonitorFormulaAndFunctionCostDataSource; use datadog_api_client::datadogV1::model::MonitorFormulaAndFunctionCostQueryDefinition; use datadog_api_client::datadogV1::model::MonitorFormulaAndFunctionQueryDefinition; use datadog_api_client::datadogV1::model::MonitorOptions; use datadog_api_client::datadogV1::model::MonitorThresholds; use datadog_api_client::datadogV1::model::MonitorType; #[tokio::main] async fn main() { let body = Monitor::new( r#"formula("exclude_null(query1)").last("7d").anomaly(direction="above", threshold=10) >= 5"#.to_string(), MonitorType::COST_ALERT, ) .message("some message Notify: @hipchat-channel".to_string()) .name("Example Monitor".to_string()) .options( MonitorOptions::new() .include_tags(true) .thresholds(MonitorThresholds::new().critical(5.0 as f64).warning(Some(3.0 as f64))) .variables( vec![ MonitorFormulaAndFunctionQueryDefinition::MonitorFormulaAndFunctionCostQueryDefinition( Box::new( MonitorFormulaAndFunctionCostQueryDefinition::new( MonitorFormulaAndFunctionCostDataSource::CLOUD_COST, "query1".to_string(), "sum:aws.cost.net.amortized.shared.resources.allocated{aws_product IN (amplify ,athena, backup, bedrock ) } by {aws_product}.rollup(sum, 86400)".to_string(), ).aggregator(MonitorFormulaAndFunctionCostAggregator::SUM), ), ) ], ), ) .priority(Some(3)) .tags(vec!["test:examplemonitor".to_string(), "env:ci".to_string()]); let configuration = datadog::Configuration::new(); let api = MonitorsAPI::with_config(configuration); let resp = api.create_monitor(body).await; if let Ok(value) = resp { println!("{:#?}", value); } else { println!("{:#?}", resp.unwrap_err()); } } ``` ```rust // Create a Data Jobs monitor returns "OK" response use datadog_api_client::datadog; use datadog_api_client::datadogV1::api_monitors::MonitorsAPI; use datadog_api_client::datadogV1::model::Monitor; use datadog_api_client::datadogV1::model::MonitorFormulaAndFunctionDataJobsQueryDefinition; use datadog_api_client::datadogV1::model::MonitorFormulaAndFunctionQueryDefinition; use datadog_api_client::datadogV1::model::MonitorOptions; use datadog_api_client::datadogV1::model::MonitorThresholds; use datadog_api_client::datadogV1::model::MonitorType; #[tokio::main] async fn main() { let body = Monitor::new( r#"formula("failed_runs(run_query)").by(job_name,workspace_name).last(10d) > 0"#.to_string(), MonitorType::DATA_JOBS_ALERT, ) .message("Data jobs alert triggered".to_string()) .name("Example-Monitor".to_string()) .options( MonitorOptions::new() .thresholds(MonitorThresholds::new().critical(0.0 as f64)) .variables( vec![ MonitorFormulaAndFunctionQueryDefinition::MonitorFormulaAndFunctionDataJobsQueryDefinition( Box::new( MonitorFormulaAndFunctionDataJobsQueryDefinition::new( "databricks.job".to_string(), "job_name:*".to_string(), "run_query".to_string(), "metric".to_string(), ), ), ) ], ), ) .tags(vec!["test:examplemonitor".to_string(), "env:ci".to_string()]); let configuration = datadog::Configuration::new(); let api = MonitorsAPI::with_config(configuration); let resp = api.create_monitor(body).await; if let Ok(value) = resp { println!("{:#?}", value); } else { println!("{:#?}", resp.unwrap_err()); } } ``` ```rust // Create a Data Quality monitor returns "OK" response use datadog_api_client::datadog; use datadog_api_client::datadogV1::api_monitors::MonitorsAPI; use datadog_api_client::datadogV1::model::Monitor; use datadog_api_client::datadogV1::model::MonitorFormulaAndFunctionDataQualityDataSource; use datadog_api_client::datadogV1::model::MonitorFormulaAndFunctionDataQualityQueryDefinition; use datadog_api_client::datadogV1::model::MonitorFormulaAndFunctionQueryDefinition; use datadog_api_client::datadogV1::model::MonitorOptions; use datadog_api_client::datadogV1::model::MonitorThresholds; use datadog_api_client::datadogV1::model::MonitorType; #[tokio::main] async fn main() { let body = Monitor::new(r#"formula("query1").last("5m") > 100"#.to_string(), MonitorType::DATA_QUALITY_ALERT) .message("Data quality alert triggered".to_string()) .name("Example-Monitor".to_string()) .options( MonitorOptions::new() .thresholds(MonitorThresholds::new().critical(100.0 as f64)) .variables( vec![ MonitorFormulaAndFunctionQueryDefinition ::MonitorFormulaAndFunctionDataQualityQueryDefinition( Box::new( MonitorFormulaAndFunctionDataQualityQueryDefinition::new( MonitorFormulaAndFunctionDataQualityDataSource::DATA_QUALITY_METRICS, r#"search for column where `database:production AND table:users`"#.to_string(), "row_count".to_string(), "query1".to_string(), ).group_by(vec!["entity_id".to_string()]), ), ) ], ), ) .priority(Some(3)) .tags(vec!["test:examplemonitor".to_string(), "env:ci".to_string()]); let configuration = datadog::Configuration::new(); let api = MonitorsAPI::with_config(configuration); let resp = api.create_monitor(body).await; if let Ok(value) = resp { println!("{:#?}", value); } else { println!("{:#?}", resp.unwrap_err()); } } ``` #### Instructions First [install the library and its dependencies](https://dnd37xeb23o8n.cloudfront.net/api/latest.md?code-lang=rust) and then save the example to `src/main.rs` and run following commands: ```bash DD_SITE="datadoghq.com" DD_API_KEY="" DD_APP_KEY="" cargo run ``` {% /tab %} {% tab label="TypeScript" %} ```typescript /** * Create a Cost Monitor returns "OK" response */ import { client, v1 } from "@datadog/datadog-api-client"; const configuration = client.createConfiguration({ authMethods: { AuthZ: { accessToken: process.env.DD_BEARER_TOKEN as string, }, }, }); const apiInstance = new v1.MonitorsApi(configuration); const params: v1.MonitorsApiCreateMonitorRequest = { body: { name: "Example Monitor", type: "cost alert", query: `formula("exclude_null(query1)").last("7d").anomaly(direction="above", threshold=10) >= 5`, message: "some message Notify: @hipchat-channel", tags: ["test:examplemonitor", "env:ci"], priority: 3, options: { thresholds: { critical: 5, warning: 3, }, variables: [ { dataSource: "cloud_cost", query: "sum:aws.cost.net.amortized.shared.resources.allocated{aws_product IN (amplify ,athena, backup, bedrock ) } by {aws_product}.rollup(sum, 86400)", name: "query1", aggregator: "sum", }, ], includeTags: true, }, }, }; apiInstance .createMonitor(params) .then((data: v1.Monitor) => { console.log( "API called successfully. Returned data: " + JSON.stringify(data) ); }) .catch((error: any) => console.error(error)); ``` ```typescript /** * Create a Data Jobs monitor returns "OK" response */ import { client, v1 } from "@datadog/datadog-api-client"; const configuration = client.createConfiguration({ authMethods: { AuthZ: { accessToken: process.env.DD_BEARER_TOKEN as string, }, }, }); const apiInstance = new v1.MonitorsApi(configuration); const params: v1.MonitorsApiCreateMonitorRequest = { body: { name: "Example-Monitor", type: "data-jobs alert", query: `formula("failed_runs(run_query)").by(job_name,workspace_name).last(10d) > 0`, message: "Data jobs alert triggered", tags: ["test:examplemonitor", "env:ci"], options: { thresholds: { critical: 0, }, variables: [ { name: "run_query", jobsQuery: "job_name:*", jobType: "databricks.job", queryDialect: "metric", }, ], }, }, }; apiInstance .createMonitor(params) .then((data: v1.Monitor) => { console.log( "API called successfully. Returned data: " + JSON.stringify(data) ); }) .catch((error: any) => console.error(error)); ``` ```typescript /** * Create a Data Quality monitor returns "OK" response */ import { client, v1 } from "@datadog/datadog-api-client"; const configuration = client.createConfiguration({ authMethods: { AuthZ: { accessToken: process.env.DD_BEARER_TOKEN as string, }, }, }); const apiInstance = new v1.MonitorsApi(configuration); const params: v1.MonitorsApiCreateMonitorRequest = { body: { name: "Example-Monitor", type: "data-quality alert", query: `formula("query1").last("5m") > 100`, message: "Data quality alert triggered", tags: ["test:examplemonitor", "env:ci"], priority: 3, options: { thresholds: { critical: 100, }, variables: [ { name: "query1", dataSource: "data_quality_metrics", measure: "row_count", filter: `search for column where ` + "`" + `database:production AND table:users` + "`", groupBy: ["entity_id"], }, ], }, }, }; apiInstance .createMonitor(params) .then((data: v1.Monitor) => { console.log( "API called successfully. Returned data: " + JSON.stringify(data) ); }) .catch((error: any) => console.error(error)); ``` #### Instructions First [install the library and its dependencies](https://dnd37xeb23o8n.cloudfront.net/api/latest.md?code-lang=typescript) and then save the example to `example.ts` and run following commands: ```bash DD_SITE="datadoghq.com" DD_BEARER_TOKEN="" tsc "example.ts" ``` {% /tab %} {% tab label="Python [legacy]" %} ```python from datadog import initialize, api options = { 'api_key': '', 'app_key': '' } initialize(**options) # Create a new monitor monitor_options = { "notify_no_data": True, "no_data_timeframe": 20 } tags = ["app:webserver", "frontend"] api.Monitor.create( type="query alert", query="avg(last_5m):sum:system.net.bytes_rcvd{host:host0} > 100", name="Bytes received on host0", message="We may need to add web hosts if this is consistently high.", tags=tags, options=monitor_options ) ``` #### Instructions First [install the library and its dependencies](https://dnd37xeb23o8n.cloudfront.net/api/latest.md?code-lang=python-legacy) and then save the example to `example.py` and run following commands: ```bash DD_SITE="datadoghq.com" DD_API_KEY="" DD_APP_KEY="" python "example.py" ``` {% /tab %} {% tab label="Ruby [legacy]" %} ```ruby require 'dogapi' api_key = '' app_key = '' dog = Dogapi::Client.new(api_key, app_key) # Create a new monitor options = { 'notify_no_data' => true, 'no_data_timeframe' => 20 } tags = ['app:webserver', 'frontend'] dog.monitor( 'query alert', 'avg(last_5m):sum:system.net.bytes_rcvd{host:host0} > 100', name: 'Bytes received on host0', message: 'We may need to add web hosts if this is consistently high.', tags: tags, options: options ) ``` #### Instructions First [install the library and its dependencies](https://dnd37xeb23o8n.cloudfront.net/api/latest.md?code-lang=ruby-legacy) and then save the example to `example.rb` and run following commands: ```bash DD_SITE="datadoghq.com" DD_API_KEY="" DD_APP_KEY="" rb "example.rb" ``` {% /tab %} {% /tabs %}