How we used our new GraphQL Analytics API to build Firewall Analytics
Dec 12, 2019Nick Downie

Summary
This post details the development of Firewall Analytics, the first dashboard product to utilize the new GraphQL Analytics API. It explains how the API enables quick prototyping and iteration by allowing precise data definition and response formatting. The post provides concrete GraphQL query examples for visualizing firewall event spikes over time, identifying top offending IPs and user agents, and drilling down into individual firewall events for false positive analysis. It highlights the use of `firewallEventsAdaptiveGroups` for aggregations and `firewallEventsAdaptive` for raw event data, demonstrating how these can be mapped to UI elements for a comprehensive security workflow.
More from the Data Infrastructure & Analytics trail
- Introducing Cloudflare Basin: an open, serverless data platform, now generally available
- Introducing the Billable Usage API: programmatic cost visibility for Cloudflare
- Announcing the Monetization Gateway: charge for any resource behind Cloudflare via x402
- How we built Cloudflare's data platform and an AI agent on top of it
- Iran's Internet is partially restored, Cloudflare Radar data shows