CONNECTIONS_V View
This view provides raw historic data about connections.
Lacework regularly monitors for connections in your environment and returns a row in the CONNECTIONS_V view when Lacework detects a connection.
Each row contains connection information as listed in the columns.
Column Name | Data Type | Description |
---|---|---|
START_TIME | Timestamp | The time and date when the hourly aggregation time period starts. |
END_TIME | Timestamp | The time and date when the hourly aggregation time period ends. |
SRC_ENTITY_TYPE | Varchar | The type of entity initiating the connection. |
SRC_ENTITY_ID | Variant | The identifier of the entity initiating the connection. |
DST_ENTITY_TYPE | Varchar | The type of entity accepting the connection. |
DST_ENTITY_ID | Variant | The identifier of the entity accepting the connection. |
SRC_IN_BYTES | Variant | Bytes received by the entity initiating the connection. |
SRC_OUT_BYTES | Variant | Bytes sent by the entity initiating the connection. |
DST_IN_BYTES | Variant | Bytes received by the entity accepting the connection. |
DST_OUT_BYTES | Variant | Bytes sent by the entity accepting the connection. |
ENDPOINT_DETAILS | Variant | The endpoint information (IPs, ports, protocol) for individual connections between entities. |
NUM_CONNS | Variant | The total number of connections between source and destination entities. |