Network flow tree
Groups the filtered network flows into a tree by group_by, a list of one or more dimensions applied outermost first: client, client_kind, server, server_kind, server_port, locality and proto. Every node carries its cost, bytes (total and per direction), connections opened, unhealthy connections, share of the filtered bytes and cost, the direction the cost is charged for, and connection_ids (up to 100, connection_ids_truncated when more exist) for charting through GET /service-map/connections//series. sort_by (cost|bytes, default cost) orders the groups at every level. group_limit (default 20, max 100, negative for all) caps the children under each parent and remainder sums what was cut; group_offset pages the top level only. children_total and nodes_total give the full group counts. A node’s cost is null when none of its flows is priced. Every node and the totals also carry previous_bytes_total, previous_cost_monthly (the previous period’s traffic priced at each connection’s current rate), bytes_change_pct and cost_change_pct, which are null when there is no previous value. Totals describe all filtered flows, so they equal the network detail totals for the same filters. Filters accept locality, kind (the server endpoint kind) and dst_port, AND across dimensions and OR within one.
Authorizations
Enter "Bearer {token}"
Headers
Tenant ID
Query Parameters
Cost period; defaults to month_to_date
month_to_date, last_7d, last_30d, calendar_month, custom Closed calendar month in YYYY-MM format; required when period=calendar_month
Window start in RFC3339 format; required when period=custom
Window end in RFC3339 format; required when period=custom
Body
Dimensions to nest by (group_by), filters as dimension -> values, sort_by (cost|bytes), group_limit and group_offset