Why Use these APIs?

Cisco Secure Network Analytics (formerly Stealthwatch) provides easy to use and comprehensive APIs for reporting, making configuration changes, managing users, exporting data, and more. Our APIs are free to allow rapid development of apps, and our open source development community is growing quickly.

The Secure Network Analytics REST APIs consist of a collection of resources for developers, administrators, or partners that enable the functionality of Secure Network Analytics to be accessed programmatically. Since Secure Network Analytics REST APIs are based on open standards, you can use any programming or scripting language you wish as long as it supports Hyper Text Transfer Protocol (HTTP). These instructions assume you have some knowledge of using REST services and a basic understanding of HTTP. Experience using either curl or wget is highly beneficial.

SOAP Information

You may also be interested in the Stealthwatch Management Console Web Services Programming Guide which documents the Simple Object Access Protocol (SOAP) interface to Secure Network Analytics. With the Web Services API that is compliant with the SOAP, administrators can use external applications, such as Security Information and Event Management (SIEM) systems, trouble-ticketing systems, and third-party reporting systems, to access data from the management console.

After the release of Secure Network Analytics (formerly Stealthwatch) v7.2, we began migrating from SOAP APIs to REST APIs. If you use Secure Network Analytics API suites, you should begin using REST API equivalents where available.

We do not support SOAP APIs for Secure Network Analytics with a Data Store.

Rebranding Information

In v7.4.0, we rebranded our Cisco Stealthwatch Enterprise products to Cisco Secure Network Analytics. You will see our former product name, Stealthwatch, used in our APIs and whenever necessary to maintain clarity.