---
title: "Retrieve WAF events services report."
method: GET
path: "/v1/reporting/sites/{id}/waf/events-services"
tags: ["Reporting"]
---

# Retrieve WAF events services report.

`GET /v1/reporting/sites/{id}/waf/events-services`

For given site it checks cloudflare stats to get WAF events services data and returns it.

## Path parameters

- `id` integer, required — ID of the Site you are interacting with

## Query parameters

- `duration` '30m' | '1h' | '6h' | '12h' | '24h' | '72h' | '7d' | '30d', required — Duration that the listed data is for (m = minutes, h = hours, d = days)

## Response `200`

OK

- WAFEventsServicesResponse
  - `errors` string[]
  - `data` WAFEventsServicesResponseViewer
    - `viewer` object
      - `__typename` 'viewer' — name of the property
      - `zones` WAFEventsServicesResponseZone[]
        - `__typename` 'zone' — name of the property
        - `firewallEventsAdaptiveGroups` FirewallEventsAdaptiveGroup[]
          - `__typename` 'ZoneFirewallEventsAdaptiveGroups' — name of the property
          - `avg` object
            - `__typename` 'ZoneFirewallEventsAdaptiveGroupsAvg' — Name of the property
            - `sampleInterval` number
          - `count` integer — Overall number of firewall events
          - `dimensions` ZoneFirewallEventsAdaptiveGroupsDimensionsSource
            - `__typename` 'ZoneFirewallEventsAdaptiveGroupsDimensions' — name of the property
            - `source` 'firewallCustom' | 'firewallManaged' | 'ratelimit' | 'waf' — what type of security system intercepted the event

## Other responses

- `400` — Bad Request
- `401` — Authentication failed
- `403` — Not authorized to access endpoint
- `404` — Given site not found for user
- `405` — Invalid input
- `500` — Internal error

---

[API](https://skmtc.net/rocket/apis/rocket-net-api.md) · [All operations](https://skmtc.net/rocket/apis/rocket-net-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/rocket/rocket-net-api/versions/db0dcbbc5764/schema)