What it does
Datadog Anomaly RCA Agent is an SRE-focused MCP agent that detects metric anomalies in Datadog, correlates them with log error patterns, and generates a structured Root Cause Analysis report. The pipeline collects metric time series and logs from Datadog, detects anomaly windows via z-score analysis, extracts and correlates log error patterns, and synthesizes a narrative RCA via LLM (with a deterministic template fallback when no LLM is configured). It can optionally post the report to a Slack war-room channel and annotate a PagerDuty incident. Guardrails include a 24-hour query window cap, PII masking, and prompt-injection detection. Built for SRE and on-call teams who want a first-pass root-cause hypothesis in seconds instead of manually cross-referencing dashboards and logs.
Example prompts
- Run a full anomaly RCA for the checkout service over the last 6 hours
- Query metrics for the payments service and detect anomaly windows
- Correlate this anomaly with recent log errors and generate an RCA report
Before you connect
The credentials this agent will ask you for — the full setup is on the Setup tab.
Needs 5 optional credentials to connect. See setup
