Cisco Secure Cloud Analytics - Remove Domain from Watchlist
This atomic belongs to the Cisco Secure Cloud Analytics atomic group.
Removes the domain provided from the Cisco Secure Cloud Analytics watchlist.
Target: Secure Cloud Analytics - v3 integration target or an HTTP Endpoint for "<your tenant>.obsrvbl.com" with a path of "/api"
Account Key: None if using an integration-provided target, API key if using an HTTP Endpoint target
Steps:
[] Validate the API path
[] Build the authorization header
[] Search the watchlist for the domain provided
[] Check if the request was successful:
[]> If it was, attempt to extract the first entry's ID and remove it from the watchlist
[]> If it wasn't, return an error
More information about this API: https://developer.cisco.com/docs/stealthwatch/cloud/#!stealthwatch-cloud-api-version-3