Skip to content

Get event analytics

GET
/clusters/{cluster_id}/insights/events
curl --request GET \
  --url http://localhost:8000/clusters/2489E9AD-2EE2-8E00-8EC9-32D5F69181C0/insights/events \
  --header 'API-Key: <API-Key>' \
  --header 'API-Version: 2026-06-01.beta'

Returns user activity analytics (MAU/WAU/DAU), login trends, protocol breakdown, registration statistics, and machine-to-machine authentication analytics from the events store.

Note: active_users counts use fixed 30/7/1-day rolling windows and are not affected by start_time/end_time.

When neither start_time nor end_time is provided the window covers the last 30 days.

Required scope: clusters:insights:read

cluster_id
required
string format: uuid
start_time
string format: date-time

Inclusive start time (ISO 8601). Defaults to 30 days ago when omitted.

end_time
string format: date-time

Inclusive end time (ISO 8601). Defaults to the current time when omitted.

API-Version
required
string
Allowed values: 2026-06-01.beta

The request has succeeded.

Media typeapplication/json

User activity and login event analytics from the events store.

object
active_users
required

Active user counts across fixed rolling time windows.

object
monthly
required

Distinct users who logged in during the last 30 days.

integer format: int64
weekly
required

Distinct users who logged in during the last 7 days.

integer format: int64
daily
required

Distinct users who logged in during the last 24 hours.

integer format: int64
total_logins
required
integer format: int64
total_login_attempts
required
integer format: int64
success_rate
required

Overall login success rate (0–1).

number format: double
top_realms
required

Realms ranked by login volume.

Array<object>

Activity summary for a single realm.

object
realm_id
required
string
realm_name
required
string
user_count
required
integer format: int64
login_count
required
integer format: int64
login_trends
required
Array<object>
object
timestamp
required
string format: date-time
value
required
integer format: int64
protocol_stats
required
Array<object>

Authentication event count broken down by protocol.

object
protocol
required
string
count
required
integer format: int64
rate
required

Fraction of total login events for this protocol (0–1).

number format: double
registrations
required

User registration analytics.

object
total_registrations
required
integer format: int64
total_registration_attempts
required
integer format: int64
registration_success_rate
required

Ratio of successful registrations to total attempts (0–1).

number format: double
registration_trends
required
Array<object>
object
timestamp
required
string format: date-time
value
required
integer format: int64
machine_to_machine
required

Machine-to-machine (client credentials grant) authentication analytics.

object
monthly_active_clients
required

Distinct clients that authenticated during the last 30 days.

integer format: int64
weekly_active_clients
required

Distinct clients that authenticated during the last 7 days.

integer format: int64
daily_active_clients
required

Distinct clients that authenticated during the last 24 hours.

integer format: int64
total_client_logins
required
integer format: int64
total_client_attempts
required
integer format: int64
client_success_rate
required

Ratio of successful client authentications to total attempts (0–1).

number format: double
total_client_registrations
required
integer format: int64
total_client_registration_attempts
required
integer format: int64
client_registration_success_rate
required

Ratio of successful client registrations to total attempts (0–1).

number format: double
top_clients
required
Array<object>

Activity summary for a single service-account client.

object
client_id
required
string
client_name
required
string
login_count
required
integer format: int64
realm_name
required
string
client_login_trends
required
Array<object>
object
timestamp
required
string format: date-time
value
required
integer format: int64

Example

{
  "protocol_stats": [
    {
      "protocol": "openid-connect"
    }
  ]
}

The server could not understand the request due to invalid syntax.

Media typeapplication/problem+json

RFC 9457 Problem Details object.

object
type
required
string format: uri
title
required
string
status
required
integer
detail
required
string
instance
string format: uri

Example generated

{
  "type": "https://example.com",
  "title": "example",
  "status": 1,
  "detail": "example",
  "instance": "https://example.com"
}

Access is unauthorized.

Media typeapplication/problem+json

RFC 9457 Problem Details object.

object
type
required
string format: uri
title
required
string
status
required
integer
detail
required
string
instance
string format: uri

Example generated

{
  "type": "https://example.com",
  "title": "example",
  "status": 1,
  "detail": "example",
  "instance": "https://example.com"
}

Access is forbidden.

Media typeapplication/problem+json

RFC 9457 Problem Details object.

object
type
required
string format: uri
title
required
string
status
required
integer
detail
required
string
instance
string format: uri

Example generated

{
  "type": "https://example.com",
  "title": "example",
  "status": 1,
  "detail": "example",
  "instance": "https://example.com"
}

The server cannot find the requested resource.

Media typeapplication/problem+json

RFC 9457 Problem Details object.

object
type
required
string format: uri
title
required
string
status
required
integer
detail
required
string
instance
string format: uri

Example generated

{
  "type": "https://example.com",
  "title": "example",
  "status": 1,
  "detail": "example",
  "instance": "https://example.com"
}

Client error

Media typeapplication/problem+json
object
type
required
string format: uri
title
required
string
status
required
integer
detail
required
string
instance
string format: uri
errors
required
Array<object>
>= 1 items
object
field
required
string
detail
required
string
code
string
value

Example generated

{
  "type": "https://example.com",
  "title": "example",
  "status": 1,
  "detail": "example",
  "instance": "https://example.com",
  "errors": [
    {
      "field": "example",
      "detail": "example",
      "code": "example",
      "value": "example"
    }
  ]
}

Client error

Media typeapplication/problem+json

RFC 9457 Problem Details object.

object
type
required
string format: uri
title
required
string
status
required
integer
detail
required
string
instance
string format: uri

Example generated

{
  "type": "https://example.com",
  "title": "example",
  "status": 1,
  "detail": "example",
  "instance": "https://example.com"
}
Retry-After
integer
RateLimit-Limit
integer
RateLimit-Remaining
integer
RateLimit-Reset
integer
X-RateLimit-Limit-Second
integer
X-RateLimit-Remaining-Second
integer
X-RateLimit-Limit-Minute
integer
X-RateLimit-Remaining-Minute
integer
X-RateLimit-Limit-Hour
integer
X-RateLimit-Remaining-Hour
integer
X-RateLimit-Limit-Day
integer
X-RateLimit-Remaining-Day
integer

Server error

Media typeapplication/problem+json

RFC 9457 Problem Details object.

object
type
required
string format: uri
title
required
string
status
required
integer
detail
required
string
instance
string format: uri

Example generated

{
  "type": "https://example.com",
  "title": "example",
  "status": 1,
  "detail": "example",
  "instance": "https://example.com"
}

Server error

Media typeapplication/problem+json

RFC 9457 Problem Details object.

object
type
required
string format: uri
title
required
string
status
required
integer
detail
required
string
instance
string format: uri

Example generated

{
  "type": "https://example.com",
  "title": "example",
  "status": 1,
  "detail": "example",
  "instance": "https://example.com"
}