API reference · WAF
List what the WAF did in a zone, per hour, hostname, rule and action
GET
/v1/orgs/{org}/zones/{zone}/waf/counts- Permission
waf.settings.read- Operation
waf.counts.list
Parameters
| Name | In | Type | Required | Notes |
|---|---|---|---|---|
org | path | string | yes | for example "org_01h455vb4pex5vsknk084sn02q" |
zone | path | string | yes | for example "zone_01h455vb4pex5vsknk084sn02q" |
hours | query | integer | no | 1 to 168; default 24 |
x-obhut-management-assignment | header | string | no | Select one staff assignment. Direct membership remains the default. Bound API tokens use their stored source and ignore this selector. For example "masg_01h455vb4pex5vsknk084sn02q" |
Response 200
| Field | Type | Required | Notes |
|---|---|---|---|
items | array of object | yes | |
items[].hour | string (date-time) | yes | UTC, ISO 8601. |
items[].hostnameId | string or null | yes | |
items[].rule | integer | yes | 0 to ∞ |
items[].action | string | yes | one of "block", "log", "would_block", "excepted", "body_unseen", "body_cut", "arguments_limit", "condition_failed", "overflow" |
items[].exceptionId | string or null | yes | |
items[].count | integer | yes | 0 to ∞ |
keyCount | integer | yes | 0 to ∞ |