Jobs
Create PCAP Job from Event
Given a TCP or UDP network connection log event, create a PCAP lookup job that would best locate the PCAP from that event.
get/connect/joblookup/
Query parameters
timestring required
Time timestamp of the event
esidstring
The event document ID. If this is not specified then the ncid param is required.
ncidstring
The network.community_id value for the event. Ignored if the esid param is provided.