Get Session Connections

get

https://api.greynoise.io/v3/sessions/connections

Returns a graph of connections between source and destination fields. Useful for visualizing network relationships and communication patterns.

Query Params

scope

string

enum

Defaults to workspace

Controls the data scope for the query.

workspace: Query data from the current workspace (default). Requires the Sensors entitlement.
demo: Query demo/sample data. Requires the Swarm entitlement. Not available on export endpoints.

Allowed:

start_time

date-time

required

Start time for the query range (ISO 8601 format).

end_time

date-time

required

End time for the query range (ISO 8601 format).

query

string

Lucene query string to filter sessions.

src_field

string

Defaults to source.ip

Source field to aggregate on.

dest_field

string

Defaults to destination.ip

Destination field to aggregate on.

max_nodes

integer

1 to 10000

Defaults to 100

Maximum number of nodes to return.

min_connections

integer

≥ 1

Defaults to 1

Minimum number of connections to include a node.

Responses

Language

Credentials

Header

URL

Response

Click Try It! to start a request and see the response here! Or choose an example:

application/json

200OK - request successful.

400Bad request - request syntax is invalid for the specified endpoint. Verify request syntax and try again.

401Unauthorized. Please check your API key.

403Forbidden - request is not authorized due to an invalid API key or plan limitations. If due to plan limitations, contact [email protected] to upgrade your plan and unlock full results.

429Too many requests. You've hit the rate-limit.

500Unexpected error