{"command":{"effect":"read","timeoutSeconds":30,"inputSchema":{"type":"object","description":"Counts events grouped by one or more columns, such as `attacker` or `targetIndustry`. Optionally filter by date range and group the counts by day.","properties":{"path":{"type":"object","properties":{"account_id":{"description":"Account ID.","type":"string"}},"required":["account_id"],"additionalProperties":false},"query":{"type":"object","properties":{"aggregateBy":{"description":"Column(s) to aggregate by - single column or comma-separated list (e.g., 'attacker', 'targetIndustry', 'attacker,targetIndustry'). With `tags`, an event counts once for each of its tags, in the bucket counts and in `total`, and events without tags count as `Unknown`; `tags` is not supported for analytics datasets.","type":"string"},"datasetId":{"description":"Dataset UUIDs to filter by, or one standalone scope value: 'all'/'*' or 'operational' for readable intelligence datasets (isAnalytics=false), or 'analytics' for readable analytics datasets (isAnalytics=true). Scope values query at most 50 datasets. If not provided, uses the default dataset.","type":"array","items":{"type":"string"}},"startDate":{"description":"Start date for filtering (ISO 8601 format, e.g., '2024-01-01')","type":"string"},"endDate":{"description":"End date for filtering (ISO 8601 format, e.g., '2024-12-31')","type":"string"},"groupByDate":{"description":"Whether to group results by date (daily aggregation)","type":"boolean"},"limit":{"description":"Maximum number of results to return","type":"number","default":100}},"required":["aggregateBy"],"additionalProperties":false}},"required":["path","query"],"additionalProperties":false},"name":"Aggregate events","id":"cloudflare.get_eventaggregate","example":{"path":{"account_id":"example"},"query":{"aggregateBy":"example"}},"maxRequests":1,"summary":false}}