---
title: "GNQL V3 Stats"
method: GET
path: "/v3/gnql/stats"
tags: ["GNQL"]
---

# GNQL V3 Stats

`GET /v3/gnql/stats`

Get aggregate statistics for the top organizations, actors, tags,
ASNs, countries, classifications, and operating systems of all the
results of a given GNQL query.

## Query parameters

- `query` string, required
- `count` integer

## Response `200`

Query successful.

- GNQLStats
  - `query` string — The GNQL query string the requester queried
  - `count` integer — The number of total results for the given GNQL query
  - `adjusted_query` string — If the original query was adjusted due to plan limitations (for example, the requested data reach was reduced), this field contains the query that was actually executed. Empty when the original query was run unchanged.
  - `stats` object
    - `classifications` object[] — Most common classifications
      - `classification` string
      - `count` integer
    - `spoofable` object[] — Count of which are spoofable
      - `spoofable` boolean
      - `count` integer
    - `organizations` object[] — Most common organizations
      - `organization` string
      - `count` integer
    - `actors` object[] — Most common actors
      - `actor` string
      - `count` integer
    - `countries` object[] — Most common countries (Same data as metadata.source_countries. source_countries is preferred)
      - `country` string
      - `count` integer
    - `source_countries` object[] — Most common source countries
      - `country` string
      - `count` integer
    - `destination_countries` object[] — Most common destination countries
      - `country` string
      - `count` integer
    - `tags` object[] — Most common tags
      - `tag` string
      - `id` string, uuid — The unique identifier for the tag
      - `count` integer
    - `operating_systems` object[] — Most common operating systems
      - `operating_system` string
      - `count` integer
    - `categories` object[] — Most common categories
      - `category` string
      - `count` integer
    - `asns` object[] — Most common ASNs
      - `asn` string
      - `count` integer

## Other responses

- `206` — Partial content - request partially successful. Due to plan limitations, your request only returned a subset of fields and/or data. The `adjusted_query` field in the response indicates how the original query was modified. Contact sales@greynoise.io to upgrade your plan and unlock full results.
- `400` — Bad request - request syntax is invalid for the specified endpoint. Verify request syntax and try again.
- `401` — Unauthorized. Please check your API key.
- `403` — Forbidden - request is not authorized due to an invalid API key or plan limitations. If due to plan limitations, contact sales@greynoise.io to upgrade your plan and unlock full results.
- `429` — Too many requests. You've hit the rate-limit.

---

[API](https://skmtc.dev/greynoise/apis/greynoise-api.md) · [All operations](https://skmtc.dev/greynoise/apis/greynoise-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/greynoise/greynoise-api/revisions/30942574656d/schema)