---
title: "Get Simple Event Statistics"
method: GET
path: "/waap/v1/analytics/stats/{dimension}"
tags: ["Analytics"]
---

# Get Simple Event Statistics

`GET /waap/v1/analytics/stats/{dimension}`

Retrieves event statistics per given dimension of a request characteristics. A WAAP _Event_ represents a request observed by the system. The report contains the total, blocked, suppressed, and allowed event counts for top ten points in the selected dimension.

## Path parameters

- `dimension` 'country' | 'rule' | 'org' | 'ip' | 'useragent' | 'target', required — A request characteristics dimension

## Query parameters

- `domains` integer[] — List of domain IDs. Empty list means all domains belonging to the current account.
- `start` string, required — Filter data items starting from a specified date in ISO 8601 format
- `end` string, nullable — Filter data items up to a specified end date in ISO 8601 format. If not provided, defaults to the current date and time.
- `ips` string[] — Filter statistics by client IP addresses (max 10).
- `security_rule_names` string[] — Filter data by name of a security rule matched the request.

## Response `200`

Successful Response

- SimpleEventStatistics — A collection of event counts per dimension values over a time span.
  - `total` array[], required — Total number of observed requests. First element of the tuple is a key, the second one is its counter value. The key refers to a point in the requested dimension (e.g., an IP address). Results are ordered by the counter value in descending order.
    - unknown[]
      - unknown
  - `blocked` array[], required — Number of blocked request events, with the same keys and formatted the same as in the total field.
    - unknown[]
      - unknown
  - `suppressed` array[], required — Number of requests observed in monitoring mode that would have been blocked otherwise.
    - unknown[]
      - unknown
  - `allowed` array[], required — Number of requests passed due to a permissive security rule.
    - unknown[]
      - unknown
  - `reference` object, nullable, required — Additional information, depending on the selected dimension. Keys refer to the items in the result (first value of a tuple).

## Other responses

- `400` — Bad Request
- `401` — Unauthorized
- `403` — Unauthenticated
- `404` — Not Found
- `422` — Unprocessable Entity
- `500` — Internal Server Error

---

[API](https://skmtc.dev/g-core/apis/gcore-openapi.md) · [All operations](https://skmtc.dev/g-core/apis/gcore-openapi/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/g-core/gcore-openapi/revisions/09e652815095/schema)
