Query Cisco Stealthwatch Flows

This playbook runs a query on Cisco Stealthwatch flows and return its results to the context.

Cisco Secure Network Analytics (Stealthwatch) · 7 tasks · 5 inputs · 1 output

Inputs

  • timeout — The amount to wait before a timeout occurs (in minutes).
  • interval — Polling frequency - how often the polling command should run (in minutes).
  • range — Range of results to return (e.g., 0-20).
  • tenant_id — Tenant ID represents the domain on Cisco Stealthwatch.
  • time_range

Outputs

  • CiscoStealthwatch.FlowResults — The results of the search.

Commands used

cisco-stealthwatch-query-flows-initialize cisco-stealthwatch-query-flows-results cisco-stealthwatch-query-flows-status

Flowchart

yes Start Start GenericPolling - GenericPolling GenericPolling GenericPolling Done Done Is search completed? Is search completed? cisco-stealthwatch-query-flows-initialize - cisco-stealthwatch-query-flows-initialize cisco-stealthwatch-query-... cisco-stealthwatch-query-flow... cisco-stealthwatch-query-flows-status - cisco-stealthwatch-query-flows-status cisco-stealthwatch-query-... cisco-stealthwatch-query-flow... cisco-stealthwatch-query-flows-results - cisco-stealthwatch-query-flows-results cisco-stealthwatch-query-... cisco-stealthwatch-query-flow...