Session Connections
session-connectionsRead-only
Generate a graph of network connections between source and destination fields to visualize communication relationships over a time range.
Instructions
Build a connection graph (nodes + links) between a source field and a destination field over a time range. Useful for visualizing communication relationships.
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| query | No | Lucene query string to filter sessions | |
| scope | No | Data scope: workspace (default) or demo | |
| end_time | Yes | End time, ISO 8601 (e.g. 2025-01-07T23:59:59Z) | |
| max_nodes | No | Max nodes to return, 1-10000 (default: 100) | |
| src_field | No | Source field to aggregate on (default: source.ip) | |
| dest_field | No | Destination field to aggregate on (default: destination.ip) | |
| start_time | Yes | Start time, ISO 8601 (e.g. 2025-01-01T00:00:00Z) | |
| min_connections | No | Min connections to include a node (default: 1) |
Output Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| links | No | ||
| nodes | No | ||
| total | No | ||
| request_metadata | No |