You can also create alerts on high numbers of Cloud Foundry audit events, such as crashed application processes ( audit.app.process.crash ) or failed SSH attempts ( audit.app.ssh-unauthorized ), and configure Datadog to notify your team. You can then inspect individual event messages to get readymade leads for your investigations.