# stealthwatch-enterprise-learning-labs-code

**Repository Path**: mirrors_CiscoDevNet/stealthwatch-enterprise-learning-labs-code

## Basic Information

- **Project Name**: stealthwatch-enterprise-learning-labs-code
- **Description**: No description available
- **Primary Language**: Unknown
- **License**: MIT
- **Default Branch**: master
- **Homepage**: None
- **GVP Project**: No

## Statistics

- **Stars**: 0
- **Forks**: 0
- **Created**: 2021-10-22
- **Last Updated**: 2026-03-01

## Categories & Tags

**Categories**: Uncategorized

**Tags**: None

## README

# Stealthwatch Enterprise Learning Labs Code

This is a set of sample scripts which walk users through the use of Stealthwatch's REST APIs

#### **Cognitive Intelligence Incidents API Configuration**
The Cognitive Intelligence Incidents REST API is disabled by default. To enable the API:

* Enable Cognitive Analytics in External Services on your SMC and Flow Collector(s).
* Locate `/lancope/tomcat/webapps/cta-events-collector/WEB-INF/classes/app.properties` file on your SMC system
* Under `#CTA_ENABLED` section set the `cta.api.enabled` option to `true`
* Restart web server on your SMC system: `systemctl restart lc-tomcat`

*(Note: The API returns CTA incidents for all domains and expects tenantId to be 0 in the API path parameter. Requesting data for any specific tenant will result in error.)*

For Updating CTA Postman to only show Dusti.hilton, add the following to pre-request JavaScript functionality:
```
var url = request.url;
pm.request.url = url + "?ipAddress=10.201.3.154";
```