Sessions
Get Session Connections
Returns a graph of connections between source and destination fields. Useful for visualizing network relationships and communication patterns.
get/v3/sessions/connections
Query parameters
scope'workspace' | 'demo'
Controls the data scope for the query.
- workspace: Query data from the current workspace (default). Requires the Sensors entitlement.
- demo: Query demo/sample data. Requires the Swarm entitlement. Not available on export endpoints.
start_timestring date-time required
Start time for the query range (ISO 8601 format).
end_timestring date-time required
End time for the query range (ISO 8601 format).
querystring
Lucene query string to filter sessions.
src_fieldstring
Source field to aggregate on.
dest_fieldstring
Destination field to aggregate on.
max_nodesinteger
Maximum number of nodes to return.
min_connectionsinteger
Minimum number of connections to include a node.
Response
OK - request successful.
Example response
{
"nodes": [
{
"id": "192.168.1.1",
"type": "source"
}
],
"links": [
{
"source": "192.168.1.1",
"target": "10.0.0.1",
"value": 15
}
],
"total": 250
}