arkime_session_detail
Fetch the full SPI document for a single Arkime session using its session ID, providing all available fields beyond the trimmed session summary.
Instructions
Fetch all fields (full SPI document) for one Arkime session.
arkime_sessions returns a trimmed row per session; this returns the complete field set for a single session id.
Args: session_id: Arkime session id (from arkime_sessions results).
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| session_id | Yes |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| result | Yes |