export DD_API_KEY="your-api-key"
export DD_APP_KEY="your-app-key"

datadog
├── monitor        Manage monitors (alerts)
│   ├── list       List monitors with filters
│   ├── get        Get monitor details by ID
│   ├── search     Search monitors by query
│   ├── create     Create a monitor (standard or log-based formula)
│   ├── update     Update monitor properties and thresholds
│   └── delete     Delete a monitor
│
├── metric         Query metric data
│   └── query      Query scalar metric values
│
├── event          Query events
│   └── list       List events with time range and filters
│
├── log            Query logs
│   └── search     Search logs by query
│
├── service        Query APM services
│   └── list       List active services by environment
│
├── error          Error Tracking (aliases: error, errors)
│   ├── search     Search error issues
│   └── get        Get error issue details
│
└── pipeline       Manage log processing pipelines
    ├── list       List all pipelines
    ├── get        Get pipeline details with processors
    ├── create     Create a new pipeline
    ├── delete     Delete a pipeline
    ├── add-category   Add a Category Processor
    └── add-remapper   Add an Attribute Remapper

datadog service list --env prod                    # confirm service is active
datadog log search "service:myapp status:error" --from 1h
datadog error search "service:myapp" --track trace --from 24h
datadog metric query "avg:trace.http.request.errors{service:myapp}.as_count()" --from 1h

datadog monitor list --json                        # export all monitors
datadog monitor get <id>                           # inspect a specific one
datadog metric query "<monitor-query>" --from 1h   # validate threshold against actual values
datadog monitor update <id> --threshold-critical 100 --threshold-warning 80 --renotify 30

datadog pipeline create --name "Team Tagging" --filter "*" --enabled
datadog pipeline add-category <id> --target team \
  --rule "service:(svc-a OR svc-b)=team-alpha" \
  --rule "service:(svc-c OR svc-d)=team-beta"
datadog pipeline add-remapper <id> --source team --target team \
  --source-type attribute --target-type tag

datadog monitor create --type "log alert" \
  --name "My service error rate" \
  --formula "errors / total" \
  --log-query-error "service:myapp status:error" \
  --log-query-total "service:myapp" \
  --threshold-critical 0.1 --threshold-warning 0.05 \
  --window "5m" --message "@pagerduty-team" --tags "env:prod,team:myteam"