Skip to content
Cloudflare API
Start here
API Reference

Analytics Query

Query analytics summary
POST/accounts/{account_id}/analytics/query/{dataset}/summary
Query analytics timeseries
POST/accounts/{account_id}/analytics/query/{dataset}/timeseries
Query analytics top-N
POST/accounts/{account_id}/analytics/query/{dataset}/top-n
ModelsExpand Collapse
AnalyticsQuerySummaryResponse object { currentTotal, previousTotal }
currentTotal: array of map[unknown]

Aggregated stats for the requested time range.

previousTotal: array of map[unknown]

Aggregated stats for the equivalent preceding time range, for trend comparison.

AnalyticsQueryTimeseriesResponse object { resolution, slots }
resolution: string

The resolution used for time bucketing.

slots: array of map[unknown]

Time-bucketed result rows. Each slot contains a time_bucket field plus the requested stats and group-by dimensions.

AnalyticsQueryTopNResponse = map[unknown]

Maps field names to values. Keys represent stat names and group-by column names. Values depend on the dataset (strings, numbers, booleans).

Analytics QueryData Security

Analytics QueryData SecurityContent Findings

Top integrations by content findings
POST/accounts/{account_id}/analytics/query/data-security/content-findings/top-n
ModelsExpand Collapse
ContentFindingTopNResponse = map[unknown]

Maps field names to values. Keys represent stat names and group-by column names. Values depend on the dataset (strings, numbers, booleans).

Analytics QueryData SecurityFindings

Data security findings summary
POST/accounts/{account_id}/analytics/query/data-security/findings/summary
Data security findings timeseries
POST/accounts/{account_id}/analytics/query/data-security/findings/timeseries
ModelsExpand Collapse
FindingSummaryResponse object { currentTotal, previousTotal }
currentTotal: array of map[unknown]

Aggregated stats for the requested time range.

previousTotal: array of map[unknown]

Aggregated stats for the equivalent preceding time range, for trend comparison.

FindingTimeseriesResponse object { slots, resolution }

Merged CASB and CDE findings timeseries result.

slots: array of map[unknown]

Contains time-bucketed result rows. Each slot includes a timestamp plus content and posture maps with cloud and saas keys.

resolution: optional string

Always null for this endpoint.