Query and filter Datadog logs from the shell using the Composio CLI. Run scoped log searches, pivot across services/environments, and export structured JSON for downstream agents instead of click-driving the Datadog UI.

Datadog Logs Query Datadog logs through the [Composio CLI](https://docs.composio.dev/docs/cli) so the agent can filter, pivot, and summarize without you pasting screenshots. When to Use Investigating a spike, error surge, or latency regression and you want structured JSON back. Correlating a deploy with log volume changes across services/environments. Building a scheduled "what broke overnight" digest. Prereqs Discover Tools Commonly used slugs (confirm with get schema ): DATADOG SEARCH LOGS DATADOG AGGREGATE LOGS DATADOG LIST ACTIVE METRICS DATADOG GET EVENT Filter Recipes Errors from one service in the last 15 minutes Aggregate error count by endpoint Trace a single request across services Save a reusable query Pipe into Local Analysis Datadog output is JSON on stdout — pipe to jq for quick summaries: Multi Step Workflow Save as scripts/dd incident.ts , then composio run file scripts/dd incident.ts service checkout : Schedule a Daily Digest Use cron (or composio dev listen for triggers) to run the workflow and forward results to Slack: Troubleshooting Empty results → confirm env: and service: tags; Datadog indexes are region scoped — set the right site during composio link datadog . 403 Forbidden → the APP key lacks logs read ; regenerate with scope and re link. Slow queries → narrow from/to , add a facet filter, or use DATADOG AGGREGATE LOGS instead of pulling raw events. Unknown facet → composio search "list log facets" toolkits datadog . Full CLI reference: [docs.composio.dev/docs/cli](https://docs.composio.dev/docs/cli)

datadog-logs