Datadog Log Forwarder

Step 1: Create a Webhook Source in RunReveal

1. In RunReveal, go to Sources → Add Source → Webhook (Generic).
2. Name the source (for example, Datadog Logs).
3. Copy both values for use in Datadog:
   • Webhook URL (for example: https://api.runreveal.com/sources/webhook/<WEBHOOK_ID>)
   • Bearer token (used in the Authorization header)

Example Webhook Source configuration:

The Webhook URL is the HTTP endpoint Datadog will call. The Bearer token authenticates Datadog to RunReveal.

Step 2: Create a Datadog HTTP Destination

1. In Datadog, open Logs → Configuration → Destinations → New Destination.
2. Select HTTP as the destination type and name it (for example, RunReveal).
3. Configure the endpoint:
   • URL: https://api.runreveal.com/sources/webhook/<WEBHOOK_ID>
   • Authentication type: Request Header
   • Header name: Authorization
   • Header value: Bearer <YOUR_RUNREVEAL_BEARER_TOKEN>
4. (Optional) Choose All Tags to forward everything that matches your routing, or select specific tags to minimize volume.

Example Datadog destination setup:

Step 3: Verify Delivery in RunReveal

• Return to Sources in RunReveal and open your Datadog Logs Webhook source card.
• Confirm the Last Event timestamp and recent volume.

Example healthy source card:

Click Query to explore incoming logs. Start with the sourceID which corresponds to the source id found on each source card on the sources page:

SELECT *
FROM {table:Identifier}
WHERE ({tsColumn:Identifier} >= now() - INTERVAL 1 HOUR) 
 AND ({tsColumn:Identifier} < now()) 
 AND ((sourceID = '2yNH5zTW5USNLjRHWgbdVMjOsYY'))
LIMIT 10