v32

latestOpenAPI 3.1.0raw.githubusercontent.com2026-05-151,1412,2144.5 MB
Analytics

Get request log data

Retrieve request log data over account's domains. The log records every request passing through WAAP towards the origin server.

get/waap/v1/analytics/requests

Query parameters

domainsinteger[]

List of domain IDs. Empty list means all domains belonging to the current account.

List of domain IDs. Empty list means all domains belonging to the current account.

[
  1,
  2,
  3
]
orderingstring

Sort data by given field.

Example:userAgent

Sort data by given field.

startstring required

Filter data items starting from a specified date in ISO 8601 format

Example:2024-04-13T00:00:00+01:00

Filter data items starting from a specified date in ISO 8601 format

endstring nullable

Filter data items up to a specified end date in ISO 8601 format. If not provided, defaults to the current date and time.

Example:2024-04-14T12:00:00Z

Filter data items up to a specified end date in ISO 8601 format. If not provided, defaults to the current date and time.

limitinteger

Number of items to return

Number of items to return

offsetinteger

Number of items to skip

Number of items to skip

ipsstring[]

Filter traffic data by client IP.

Filter traffic data by client IP.

[
  "1.2.3.4",
  " 2001:678:194::3c25:ddad"
]
pathstring nullable

Filter by URL path with a glob-like pattern.

Example:/home

Filter by URL path with a glob-like pattern.

countriesstring[]

Filter data by a country code of the originating IP address in ISO 3166-1 alpha-2 format.

Filter data by a country code of the originating IP address in ISO 3166-1 alpha-2 format.

[
  "DE",
  "MY"
]
status_codesinteger[]

Filter data by HTTP response status code.

Filter data by HTTP response status code.

http_methodsHttpMethodType[]

Filter by HTTP methods

Filter by HTTP methods

[
  "GET",
  "HEAD"
]
reference_idsstring[]

Filter data by reference IDs.

Filter data by reference IDs.

request_idsstring[]

Filter data by request IDs.

Filter data by request IDs.

session_idsstring[]

Filter data by session IDs.

Filter data by session IDs.

security_rule_namesstring[]

Filter data by name of a security rule matched the request.

Filter data by name of a security rule matched the request.

[
  "SQL injection"
]
decisionEventDecision[]

Filter data by decision.

Filter data by decision.

[
  "allowed",
  "blocked"
]
optional_actionOptionalAction[]

Filter data by optional action.

Filter data by optional action.

[
  "captcha",
  "challenge"
]
exclude_ipsstring[]

Exclude traffic data by client IP.

Exclude traffic data by client IP.

[
  "1.2.3.4",
  "2001:678:194::3c25:ddad"
]
exclude_countriesstring[]

Exclude data by a country code of the originating IP address in ISO 3166-1 alpha-2 format.

Exclude data by a country code of the originating IP address in ISO 3166-1 alpha-2 format.

[
  "DE",
  "MY"
]
exclude_session_idsstring[]

Exclude data by session IDs.

Exclude data by session IDs.

exclude_reference_idsstring[]

Exclude data by reference IDs.

Exclude data by reference IDs.

exclude_security_rule_namesstring[]

Exclude data by name of a security rule matched the request.

Exclude data by name of a security rule matched the request.

[
  "SQL injection"
]
exclude_domainsinteger[]

Exclude data by domain ID.

Exclude data by domain ID.

ja3string nullable

Filter by JA3 TLS client fingerprint. When present, the value must be exactly 32 hexadecimal characters (mixed case allowed) and is case-folded to lowercase when the backend filter is built. Omit the parameter entirely to apply no JA3 filter.

Example:e7d705a3286e19ea42f587b344ee6865

Filter by JA3 TLS client fingerprint. When present, the value must be exactly 32 hexadecimal characters (mixed case allowed) and is case-folded to lowercase when the backend filter is built. Omit the parameter entirely to apply no JA3 filter.

user_agentstring nullable

Include entries whose user agent contains the supplied text, case-insensitive partial match. Omit the parameter to apply no user agent text filter.

Example:Mozilla/5.0

Include entries whose user agent contains the supplied text, case-insensitive partial match. Omit the parameter to apply no user agent text filter.

user_agent_clientsstring[]

Include entries whose parsed user agent client exactly equals any supplied value. Omit or provide an empty list to apply no user agent client filter.

Include entries whose parsed user agent client exactly equals any supplied value. Omit or provide an empty list to apply no user agent client filter.

[
  "Chrome",
  "Firefox"
]
user_agent_devicesstring[]

Include entries whose parsed user agent device exactly equals any supplied value. Omit or provide an empty list to apply no user agent device filter.

Include entries whose parsed user agent device exactly equals any supplied value. Omit or provide an empty list to apply no user agent device filter.

[
  "mac",
  "Nokia",
  "PlayStation"
]
tagsstring[]

Include entries whose tag exactly equals any supplied value. Omit or provide an empty list to apply no tag filter.

Include entries whose tag exactly equals any supplied value. Omit or provide an empty list to apply no tag filter.

[
  "evasiveclient",
  "injectionattack"
]
organizationsstring[]

Include entries whose organization exactly equals any supplied value. Omit or provide an empty list to apply no organization filter.

Include entries whose organization exactly equals any supplied value. Omit or provide an empty list to apply no organization filter.

[
  "Example Org",
  "Acme Corp"
]
exclude_user_agentstring nullable

Exclude entries whose user agent contains the supplied text, case-insensitive partial match. Omit the parameter to apply no user agent text exclusion.

Example:python-requests

Exclude entries whose user agent contains the supplied text, case-insensitive partial match. Omit the parameter to apply no user agent text exclusion.

exclude_user_agent_clientsstring[]

Exclude entries whose parsed user agent client exactly equals any supplied value. Omit or provide an empty list to apply no user agent client exclusion.

Exclude entries whose parsed user agent client exactly equals any supplied value. Omit or provide an empty list to apply no user agent client exclusion.

[
  "OpenAI GPTBot",
  "Uptimerobot"
]
exclude_user_agent_devicesstring[]

Exclude entries whose parsed user agent device exactly equals any supplied value. Omit or provide an empty list to apply no user agent device exclusion.

Exclude entries whose parsed user agent device exactly equals any supplied value. Omit or provide an empty list to apply no user agent device exclusion.

[
  "SMART TV"
]
exclude_ja3string nullable

Exclude entries whose JA3 TLS client fingerprint equals the supplied value. Must be exactly 32 hexadecimal characters (mixed case allowed) and is case-folded to lowercase when the backend filter is built. Omit the parameter to apply no JA3 exclusion.

Example:e7d705a3286e19ea42f587b344ee6865

Exclude entries whose JA3 TLS client fingerprint equals the supplied value. Must be exactly 32 hexadecimal characters (mixed case allowed) and is case-folded to lowercase when the backend filter is built. Omit the parameter to apply no JA3 exclusion.

exclude_tagsstring[]

Exclude entries whose tag exactly equals any supplied value. Omit or provide an empty list to apply no tag exclusion.

Exclude entries whose tag exactly equals any supplied value. Omit or provide an empty list to apply no tag exclusion.

[
  "mousedevice"
]
exclude_organizationsstring[]

Exclude entries whose organization exactly equals any supplied value. Omit or provide an empty list to apply no organization exclusion.

Exclude entries whose organization exactly equals any supplied value. Omit or provide an empty list to apply no organization exclusion.

[
  "Acme corp"
]

Response

Successful Response

limitinteger required

Number of items requested in the response

offsetinteger required

Items response offset used

countinteger required

Number of items contain in the response

Example response

{
  "results": [
    {
      "decision": "blocked",
      "optional_action": "captcha",
      "scheme": "https",
      "http_version": "1.1",
      "ja3": "e7d705a3286e19ea42f587b344ee6865"
    }
  ]
}