---
title: "GET /api/{org_id}/service_streams/_analytics"
method: GET
path: "/api/{org_id}/service_streams/_analytics"
tags: ["Service Streams"]
---

# GET /api/{org_id}/service_streams/_analytics

`GET /api/{org_id}/service_streams/_analytics`

## Request

- Base URL: `https://api.openobserve.ai` (the document declares no server; this is the origin it was published from)
- URL: `https://api.openobserve.ai/api/{org_id}/service_streams/_analytics`
- Auth: API key in header `Authorization`
- TypeScript: <https://skmtc.dev/openobserve/apis/openobserve-api-http/docs/api/:org_id/service_streams/_analytics/get.ts> (a function with typed inputs; its response is checked against the schema)

Get comprehensive dimension analytics including cardinality classification

Returns:
- Cardinality of each dimension
- Cardinality class (VeryLow/Low/Medium/High/VeryHigh)
- Recommended priority dimensions for correlation
- Sample values for each dimension

This endpoint provides the data needed to understand which dimensions
are stable (good for correlation) vs transient (good for filtering only)

## Path parameters

- `org_id` string, required

## Response `200`

Dimension analytics

- DimensionAnalyticsSummary: Dimension analytics summary for an organization
  - `available_groups` FoundGroup[]: All alias groups found in the org's stream schemas
    - `aliases` object, required: Actual field name found per stream type, e.g., {"logs": "k8s_cluster_name"}
    - `cardinality_class` 'VeryLow' | 'Low' | 'Medium' | 'High' | 'VeryHigh': Cardinality classification for dimensions Used to determine which dimensions are stable (good for correlation) vs transient (should be filtered out or used only for additional filtering)
    - `display` string, required: Human-readable display name, e.g., "K8s Cluster"
    - `group` string, nullable: Category this group belongs to (e.g., "AWS", "Kubernetes", "Azure", "GCP", "Common"). Sourced from the underlying `FieldAlias.group`. When `None`, the frontend falls back to inferring the category from `group_id` prefix.
    - `group_id` string, required: Semantic group ID, e.g., "k8s-cluster"
    - `recommended` boolean, required: True if this group appears in 2+ stream types AND has acceptable cardinality (Deprecated: logic moving to UI)
    - `stream_types` string[], required: Which stream types contain a field from this group (e.g., ["logs", "traces"])
    - `unique_values` integer, nullable: Number of unique values seen in actual data (None if no data collected yet)
  - `by_cardinality` object, required: Dimensions by cardinality class
  - `dimensions` DimensionAnalytics[], required: All dimension analytics (dimensions with ingested data)
    - `cardinality` integer, required: Current cardinality (number of unique values seen)
    - `cardinality_class` 'VeryLow' | 'Low' | 'Medium' | 'High' | 'VeryHigh', required: Cardinality classification for dimensions Used to determine which dimensions are stable (good for correlation) vs transient (should be filtered out or used only for additional filtering)
    - `dimension_name` string, required: Dimension name (e.g., "k8s-cluster", "environment", "service")
    - `first_seen` integer, required: When this dimension was first seen
    - `last_updated` integer, required: When this dimension was last updated
    - `sample_values` object: Sample values mapped by stream type, then stream name (limited to 10 for inspection)
    - `service_count` integer, required: Number of services that have this dimension
    - `value_children` object: For each unique value of this dimension, the co-occurring values of other dimensions. Example: { "common-dev": { "k8s-namespace": ["introspection", "ziox", "dev"] } }
    - `value_counts` object: Number of services that carry each specific value of this dimension. Example: { "staging": 42, "prod-us-east": 18, "prod-us-west": 11 } Used for per-value coverage: value_counts[v] / service_count = fraction of env services in that specific group value.
  - `generated_at` integer, required: When this summary was generated
  - `org_id` string, required: Organization ID
  - `recommended_priority_dimensions` string[], required: Recommended priority dimensions for correlation (sorted by cardinality, lowest first)
  - `service_field_sources` ServiceFieldSource[]: Field name sources for the "service" semantic group, ranked by hit count. Shows which actual field names in each stream type contributed a service name.
    - `field_name` string, required: The raw field name in the stream, e.g. "kubernetes_labels_app"
    - `hit_count` integer, required: Number of services where this field provided the semantic group value
    - `stream_types` string[], required: Stream types where this field was used, e.g. ["logs", "traces"]
  - `total_dimensions` integer, required: Total number of dimensions tracked

## Other responses

- `401`: Unauthorized - Authentication required
- `403`: Forbidden - Enterprise feature
- `500`: Internal server error

---

[API](https://skmtc.dev/openobserve/apis/openobserve-api-http.md) - [All operations](https://skmtc.dev/openobserve/apis/openobserve-api-http/llms.txt) - [OpenAPI document](https://skmtc.dev/openobserve/apis/openobserve-api-http/revisions/0529b8a10252?raw)