Back to Integrations
integrationCrowdStrike node
HTTP Request
integrationDatadog node
HTTP Request

CrowdStrike and Datadog integration

Save yourself the work of writing custom integrations for CrowdStrike and Datadog and use n8n instead. Build adaptable and scalable Cybersecurity, and Development workflows that work with your technology stack. All within a building experience you will love.

How to connect CrowdStrike and Datadog

  • Step 1: Set up n8n

  • Step 2: Create a new workflow to connect CrowdStrike and Datadog

  • Step 3: Add the first step

  • Step 4: Add CrowdStrike and Datadog using the HTTP Request nodes

  • Step 5: Configure CrowdStrike and Datadog nodes

  • Step 6: Connect CrowdStrike and Datadog nodes

  • Step 7: Customize your CrowdStrike and Datadog integration

  • Step 8: Save and activate workflow

  • Step 9: Test the workflow

Build your own CrowdStrike and Datadog integration

Create custom CrowdStrike and Datadog workflows by choosing triggers and actions. Nodes come with global operations and settings, as well as app-specific parameters that can be configured. You can also use the HTTP Request node to query data from any app or service with a REST API.

Supported API Endpoints for CrowdStrike

GetDeviceDetails
Retrieve device details for a specific host.
GET
/devices/entities/devices/v1
QueryDevicesByFilter
Query devices by filter.
GET
/devices/queries/devices/v1
PerformDeviceAction
Perform a device action such as 'Contain' or 'Lift Containment'.
POST
/devices/entities/devices-actions/v2
GetDeviceSnapshots
Get snapshots of device status.
GET
/devices/entities/snapshots/v1
GetDeviceDetailsById
Retrieve device details for a specific host by device ID.
GET
/devices/entities/devices/v1?ids={device_id}

To set up CrowdStrike integration, add the HTTP Request node to your workflow canvas and authenticate it using a predefined credential type. This allows you to perform custom operations, without additional authentication setup. The HTTP Request node makes custom API calls to CrowdStrike to query the data you need using the URLs you provide.

See the example here

Take a look at the CrowdStrike official documentation to get a full list of all API endpoints

GetAlerts
Retrieve a list of alerts.
GET
/alerts/queries/alerts/v1
GetAlertDetails
Retrieve details of a specific alert.
GET
/alerts/entities/alerts/v1
AcknowledgeAlert
Acknowledge a specific alert.
POST
/alerts/entities/alerts-actions/v1
UpdateAlert
Update details of a specific alert.
PATCH
/alerts/entities/alerts/v1
DeleteAlert
Delete a specific alert.
DELETE
/alerts/entities/alerts/v1

To set up CrowdStrike integration, add the HTTP Request node to your workflow canvas and authenticate it using a predefined credential type. This allows you to perform custom operations, without additional authentication setup. The HTTP Request node makes custom API calls to CrowdStrike to query the data you need using the URLs you provide.

See the example here

Take a look at the CrowdStrike official documentation to get a full list of all API endpoints

QueryDetections
Retrieve detections based on provided query parameters.
GET
/detects/queries/detects/v1
GetDetectionDetails
Retrieve details for a specific detection.
GET
/detects/entities/detects/v1
UpdateDetection
Update details of a specific detection.
PATCH
/detects/entities/detects/v1
AcknowledgeDetection
Acknowledge a specific detection.
POST
/detects/entities/detects-actions/v1
DeleteDetection
Delete a specific detection.
DELETE
/detects/entities/detects/v1

To set up CrowdStrike integration, add the HTTP Request node to your workflow canvas and authenticate it using a predefined credential type. This allows you to perform custom operations, without additional authentication setup. The HTTP Request node makes custom API calls to CrowdStrike to query the data you need using the URLs you provide.

See the example here

Take a look at the CrowdStrike official documentation to get a full list of all API endpoints

GetUsers
Retrieve a list of users.
GET
/users/queries/users/v1
GetUserDetails
Retrieve details of a specific user.
GET
/users/entities/users/v1
CreateUser
Create a new user.
POST
/users/entities/users/v1
UpdateUser
Update details of a specific user.
PATCH
/users/entities/users/v1
DeleteUser
Delete a specific user.
DELETE
/users/entities/users/v1

To set up CrowdStrike integration, add the HTTP Request node to your workflow canvas and authenticate it using a predefined credential type. This allows you to perform custom operations, without additional authentication setup. The HTTP Request node makes custom API calls to CrowdStrike to query the data you need using the URLs you provide.

See the example here

Take a look at the CrowdStrike official documentation to get a full list of all API endpoints

Supported methods for Datadog

Delete
Get
Head
Options
Patch
Post
Put

Requires additional credentials set up

Use n8n’s HTTP Request node with a predefined or generic credential type to make custom API calls.

FAQs

  • Can CrowdStrike connect with Datadog?

  • Can I use CrowdStrike’s API with n8n?

  • Can I use Datadog’s API with n8n?

  • Is n8n secure for integrating CrowdStrike and Datadog?

  • How to get started with CrowdStrike and Datadog integration in n8n.io?

Looking to integrate CrowdStrike and Datadog in your company?

Over 3000 companies switch to n8n every single week

Why use n8n to integrate CrowdStrike with Datadog

Build complex workflows, really fast

Build complex workflows, really fast

Handle branching, merging and iteration easily.
Pause your workflow to wait for external events.

Code when you need it, UI when you don't

Simple debugging

Your data is displayed alongside your settings, making edge cases easy to track down.

Use templates to get started fast

Use 1000+ workflow templates available from our core team and our community.

Reuse your work

Copy and paste, easily import and export workflows.

Implement complex processes faster with n8n

red iconyellow iconred iconyellow icon