Ryan MacLean ryanmaclean

macOS + Datadog: Noise Classification Pipeline (OpenClaw-friendly)

Use a Datadog Logs Pipeline to classify recurring low-signal macOS Unified Log noise into @noise_class.

Then exclude in dashboards/monitors with:

-@noise_class:*

 Context Graph & Agent Team Plan

                           CODEBASE HEALTH
                                │
      ┌───────────┬─────────────┼─────────────┬───────────┐
      ▼           ▼             ▼             ▼           ▼
  ┌────────┐ ┌────────┐   ┌──────────┐  ┌─────────┐ ┌────────┐
  │SECURITY│ │QUALITY │   │  INFRA   │  │   OPS   │ │  DATA  │
  │        │ │        │   │          │  │         │ │        │

Open a Powershell Admin shell by pressing Winkey+R, type “powershell” and hit ctrl+shift+enter to run as admin.

Run the follwing to install Chocolatey:

Set-ExecutionPolicy Bypass -Scope Process -Force; [System.Net.ServicePointManager]::SecurityProtocol = [System.Net.ServicePointManager]::SecurityProtocol -bor 3072; iex ((New-Object System.Net.WebClient).DownloadString('https://community.chocolatey.org/install.ps1'))

Then install some packages you'll want, using -y to confirm:

choco install -y google-chrome-x64 vscode conemu git github-desktp curl far powershell-core

	#!/usr/bin/env python3
	"""Analyze unsquelched macOS Unified Log noise drift from Datadog logs."""

	from __future__ import annotations

	import argparse
	import json
	import os
	import re
	import sys

	#!/usr/bin/env zsh
	set -euox

	# Remove all Application shortcuts from Apple macOS Dock
	defaults write "com.apple.dock" "persistent-apps" -array

	# Kill the OSX Dock, which will restart
	killall Dock

	#!/usr/bin/env bash
	set -euox

	##
	# Disable click to show desktop
	# run with `bash disable_click_to_show_desktop.sh`
	# or `chmod +x disable_click_to_show_desktop.sh && ./$_`
	# `defaults` is pretty handy! https://ss64.com/mac/defaults.html
	##

	provider "azurerm" {
	version = "2.0"
	}

	resource "azurerm_resource_group" "example" {
	name = "example-rg"
	location = "westus2"
	}

	resource "azurerm_virtual_network" "example" {

	# From https://docs.datadoghq.com/network_monitoring/performance/setup/?tab=agentwindows
	# File location: C:\ProgramData\Datadog\system-probe.yaml

	##################################
	## System Probe Configuration ##
	##################################

	## @param system_probe_config - custom object - optional
	## Enter specific configurations for your System Probe data collection.
	## Uncomment this parameter and the one below to enable them.

	from dogapi import dog_http_api as api

	##### Parameters #####

	# Credentials
	api.api_key = 'my_api_key'
	api.application_key = 'my_application_key'

	# Dashboard information
	title = "Test Quentin via API"

	## All options defined here are available to all instances.
	#
	init_config:

	## @param use_localized_counters - boolean - optional - default: false
	## Whether performance object and counter names should refer to their
	## locale-specific versions rather than their English name.
	#
	# use_localized_counters: false