GET /radar/dns/timeseries_groups/{dimension}

Specifies the attribute by which to group the results. Grouping by TLD_DNS_MAGNITUDE does not support sub-daily aggregation intervals; 15m and 1h are raised to 1d.

Valid values:

• "DNSSEC_AWARE"
• "PROTOCOL"
• "CACHE_HIT"
• "RESPONSE_CODE"
• "MATCHING_ANSWER"
• "TLD_DNS_MAGNITUDE"
• "RESPONSE_TTL"
• "LOCATION"
• "QUERY_TYPE"
• "DNSSEC_E2E"
• "DNSSEC"
• "IP_VERSION"
• "AS"
• "TLD"

Specifies whether the response includes empty DNS responses (NODATA).

Default value: [ "true" ]

Filters results by top-level domain. Incompatible with the ipVersion, protocol, dnssecE2e, dnssecAware, responseTtl, and cacheHit filters/dimensions; this restriction does not apply to country-code TLDs (2-letter, e.g. uk).

Filters results by DNS response code.

End of the date range (inclusive). Alternative to dateRange; provide together with dateStart. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.

Filters results by IP version (Ipv4 vs. IPv6).

Filters results by location. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude locations from results. For example, -US,PT excludes results from the US, but includes results from PT.

Filters results based on DNSSEC-validated answers by end-to-end security status.

Filters results by DNS transport protocol.

Start of the date range. Alternative to dateRange; provide together with dateEnd. When requesting comparison series, every series must resolve to the same duration as the main series. Each dateStart/dateEnd is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.

Aggregation interval of the results (e.g., in 15 minutes or 1 hour intervals). Refer to Aggregation intervals. When omitted, the interval is auto-selected from the requested date range; finer intervals are only available for shorter ranges. If the requested interval is too granular for the date range, the request is rejected.

Valid values:

• "1h"
• "1w"
• "15m"
• "1d"

Limits the number of objects per group to the top items within the specified time range. When item count exceeds the limit, extra items appear grouped under an "other" category. Only supported on high-cardinality dimensions; otherwise the request is rejected. Minimum value is 2.

Filters results by relative date range ending at the current time, with each value producing a separate series. Use <n>d for days (up to 364d) or <n>w for weeks (up to 52w). Append control to request the equivalent previous period for comparison: the comparison window is shifted back by the current window's length rounded up to a whole number of weeks, so it keeps the same weekday alignment and does not overlap the current window (e.g. 7dcontrol covers days -14 to -7, 10dcontrol covers days -24 to -14). For example, pass 7d and 7dcontrol to compare this week with the previous week. All series must resolve to the same duration as the main series; relative ranges (including control) satisfy this automatically. Use this parameter or set specific start and end dates (dateStart and dateEnd parameters).

Filters results based on whether the queries have a matching answer.

Filters results based on cache status.

Filters results by Autonomous System. Specify one or more Autonomous System Numbers (ASNs) as a comma-separated list. Prefix with - to exclude ASNs from results. For example, -174, 3356 excludes results from AS174, but includes results from AS3356.

Filters results based on DNSSEC (DNS Security Extensions) client awareness.

Array of names used to label the series in the response.

Format in which results will be returned.

Valid values:

• "CSV"
• "JSON"

Filters results based on DNSSEC (DNS Security Extensions) support.

Filters results by DNS query type.

Normalization method applied to the results. Refer to Normalization methods. RANK is only meaningful with the TLD_DNS_MAGNITUDE dimension, where it ranks TLDs by DNS query magnitude at each timestamp; for other dimensions it has no effect.

Valid values:

• "RANK"
• "MIN0_MAX"
• "PERCENTAGE"

Default value: "PERCENTAGE"

Filters results by continent. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude continents from results. For example, -EU,NA excludes results from EU, but includes results from NA.

Filters results by DNS response TTL.