Why Use these APIs?

Cisco Secure Network Analytics (formerly Stealthwatch) provides easy-to-use and comprehensive APIs for a variety of tasks. You can use these APIs for reporting, making configuration changes, managing users, exporting data, and more. Our APIs are free, which allows for rapid development of apps. The open source development community is also growing quickly.

The Secure Network Analytics REST APIs consist of a collection of resources for developers, administrators, or partners that allow programmatic access to Secure Network Analytics functionality. Since Secure Network Analytics REST APIs are based on open standards, you can use any programming or scripting language you wish as long as it supports Hyper Text Transfer Protocol (HTTP). These instructions assume that you know using REST services and a basic understanding of HTTP. Experience using either cURL or wget is highly beneficial.

SOAP Information

You might also find the Stealthwatch Management Console Web Services Programming Guide helpful. This guide documents the Simple Object Access Protocol (SOAP) interface to Secure Network Analytics.

With the Web Services API, which is compliant with SOAP, administrators can use external applications to access data from the management console. These applications include Security Information and Event Management (SIEM) systems, trouble-ticketing systems, and third-party reporting systems.

After the release of Secure Network Analytics (formerly Stealthwatch) v7.2, we began migrating from SOAP APIs to REST APIs. If you use Secure Network Analytics API suites, you should begin using REST API equivalents where available.

We do not support SOAP APIs for Secure Network Analytics with a Data Store.

Rebranding Information

In v7.4.0, we rebranded our Cisco Stealthwatch Enterprise products to Cisco Secure Network Analytics. You see our former product name, Stealthwatch, used in our APIs and whenever necessary to maintain clarity.