automateyournetwork/datadog-logs
workspace/skills/datadog-logs/SKILL.md
Search and analyze logs in Datadog Log Management.
$ install --global
skillsauthnpx skillsauth add automateyournetwork/netclaw datadog-logsInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 20, 2026, 3:29 AM4.4s1 file scanned
SKILL.md
- name:
- datadog-logs
- description:
- Search and analyze logs in Datadog Log Management.
- version:
- 1.0.0
- license:
- Apache-2.0
- author:
- netclaw
- tags:
- []
Datadog Logs Skill
Search and analyze logs in Datadog Log Management.
Tools
| Tool | Description |
|------|-------------|
| search_logs | Search logs with query syntax, time range, and filters |
| get_log_details | Get detailed information about a specific log entry |
| list_log_indexes | List all available log indexes |
| get_log_pipeline | Get log pipeline configuration for processing |
Example Queries
Search for error logs in the network service
→ search_logs(query="service:network status:error", time_range="1h")
Find all logs from a specific host
→ search_logs(query="host:router-core-01", time_range="15m")
Get logs with a specific trace ID
→ search_logs(query="trace_id:abc123", time_range="1d")
List all log indexes
→ list_log_indexes()
Workflows
Security Event Hunting
- Search for authentication failures:
search_logs(query="@auth.status:failed") - Correlate by source IP:
search_logs(query="@network.client.ip:10.0.0.1") - Check for privilege escalation:
search_logs(query="@action:sudo OR @action:su") - Review timeline and patterns
Network Log Correlation
- Search interface events:
search_logs(query="service:network @interface.status:down") - Correlate with routing changes:
search_logs(query="@event.type:bgp_state_change") - Check for cascading failures across regions
- Build incident timeline
Syslog Analysis
- Search by facility:
search_logs(query="@syslog.facility:local0") - Filter by severity:
search_logs(query="@syslog.severity:<4")(warning and above) - Aggregate by host and time window
- Identify anomalous patterns
Prerequisites
DD_API_KEYDatadog API keyDD_APP_KEYDatadog application keyDD_SITEDatadog site (optional, defaults to datadoghq.com)
Server
This skill uses the datadog-mcp server via remote MCP transport.
Related Skills
automateyournetwork/zoom-meeting-context
tools
VerifiedTrustedCommunity
Zoom meeting intelligence — correlates a live or referenced Zoom meeting discussion against NetClaw's historical meeting record (via the official Zoom Meetings MCP) and today's actual network state. Use when someone in a Zoom meeting references a past discussion or incident ('didn't we have this issue before?'), or asks to search prior meetings for a topic. Does not itself recognize live in-meeting questions — that happens automatically inside zoom-rtms-mcp's own extractor (spec 118) before this skill is ever invoked.
644SKILL.mdUpdated Aug 27, 2026
automateyournetwork/percepxion-oob
tools
VerifiedTrustedCommunity
Manage Lantronix out-of-band (OOB) infrastructure via Percepxion central management platform: device inventory, serial port inspection via SLC CLI, firmware compliance, config management, security auditing, and closed-loop incident remediation. Use during outages, maintenance windows, compliance cycles, and AI-assisted automation workflows.
644SKILL.mdUpdated Aug 13, 2026
automateyournetwork/n2n-federation
tools
VerifiedTrustedCommunity
Federate your NetClaw with other NetClaw operators over the BGP mesh — exchange capability inventories and ask your claw what a peer can do. (US1; remote invocation and chat land in later phases.)
638SKILL.mdUpdated Jul 11, 2026
automateyournetwork/token-tracker
tools
VerifiedTrustedCommunity
Track token consumption, enforce session budgets, and display cost for every NetClaw interaction.
638SKILL.mdUpdated Apr 3, 2026