How to send Cowrie output to Datadog Log Management

This guide describes how to configure and send cowrie outputs to Datadog Log Management.

Datadog output module Prerequisites

Working Cowrie installation
Existing Datadog account.

Cowrie Configuration for Datadog output module

Modify cowrie.cfg to enable the [output_datadog] section.
Add an API Key. You may generate one for your organization from here.
Optionally customize ddsource, ddtags and service. Otherwise, defaults are respectively cowrie, env:prod and honeypot.

Datadog Configuration

JSON logs are handled without further configuration in Datadog.