DAdatadog
Security Monitoring

Get content pack states

Get the activation state, integration status, and log collection status for all Cloud SIEM content packs.

get/api/v2/security_monitoring/content_packs/states

Request

  • Base URL
    https://api.datadoghq.com
  • URL
    https://api.datadoghq.com/api/v2/security_monitoring/content_packs/states
  • Auth
    • API key in header DD-API-KEY and API key in header DD-APPLICATION-KEY
    • or OAuth 2
      Authorization code: /oauth2/v1/authorize
      Token URL: /oauth2/v1/token scopes: security_monitoring_filters_read

Response

OK

Example response

{
  "data": [
    {
      "attributes": {
        "cp_activation": "activated",
        "filters_configured_for_logs": true,
        "integration_installed_status": "installed",
        "logs_last_collected": "within_24_hours",
        "logs_seen_from_any_index": true,
        "state": "active"
      },
      "id": "aws-cloudtrail",
      "type": "content_pack_state"
    }
  ],
  "meta": {
    "sku": "add_on_2024"
  }
}

Changes

No recorded changes to this operation across all 1 revision of this API.