How to send Cowrie output to Datadog Log Management

This guide describes how to configure and send cowrie outputs to Datadog Log Management.

Datadog output module Prerequisites

  • Working Cowrie installation

  • Existing Datadog account.

Cowrie Configuration for Datadog output module

  • Modify cowrie.cfg to enable the [output_datadog] section.

  • Add an API Key. You may generate one for your organisation from here.

  • Optionally customize ddsource, ddtags and service. Otherwise, defaults are respectively cowrie, env:prod and honeypot.

Datadog Configuration

JSON logs are handled without further configuration in Datadog.