Analytics

Console → WAF → [your domain] → Analytics. View traffic, cache hit ratio, threat breakdown, and top paths. Filter by time range, country, or status code. Export as CSV. No cookies set — KVKK and GDPR compliant.

Reading the dashboard

HEIMWALL uses a privacy-friendly estimated visitor metric derived from request patterns and edge signals without cookies or fingerprinting. Visitor counts are approximations, not exact session tracking. The approach is compliant with KVKK and GDPR because no personal data is stored or transmitted.

What you can see

The analytics dashboard shows:

Visitor and request trends over time (hourly, daily, monthly)
Traffic by country and region
Traffic by PoP (Turkey, Europe, Asia)
Blocked requests and attack events by type
Bot traffic vs human traffic ratio
Top paths and referrers
Bandwidth delivered and saved by cache

Real-time view

The live dashboard shows current request rate, active blocks and bot activity in near real time. Use it during a campaign launch or a suspected attack to monitor the effect of your rules.

Visitor analytics

The Console → WAF → [domain] → Visitors page provides unique-visitor measurement: active users, trends, and source breakdown.

Active Visitors card — the estimated number of unique visitors who made at least one request in the last 5 / 15 / 30 / 60 minutes. It refreshes every 45 seconds; it is an approximate “online” indicator, not a real-time connection count.
Four KPI cards — Estimated Visitors (cookie-less), Persistent Visitors (consent-gated), Verified Sessions (passed a challenge) and Unique IPs.
Unique visitor trend — a time-series chart; each point is its own window’s unique count, buckets are not summed across.
Source breakdowns — top values by country, ASN, path, operating system, device, browser, referer and UTM (source/medium/campaign/content). k-anonymity is applied for privacy: small groups are not shown individually but folded into “Other n groups”.

Cookie-less and persistent visitor metrics are enabled on the Cookies page: Cookies & Consent Management.

Usage report

The Console → WAF → [domain] → Usage Report page shows the selected year’s traffic history and gains. Use the year selector at the top right to go back to previous years; for the current year, values are year-to-date partial totals.

Consumption cards:

Total Bandwidth — the sum of Origin + Cache + Blocked traffic
Cache Bandwidth — traffic served from the HEIMWALL cache (never reached the origin)
Origin Bandwidth — traffic that reached your origin server
Billed Bandwidth — Cache + Origin; blocked (attack) traffic does not count toward your usage

Gain cards:

Traffic Savings — traffic that never went to the origin (Cache + Blocked), the share removed from your origin load
HEIMWALL Traffic — traffic blocked or answered by HEIMWALL that never reached the origin
Cache Hit Ratio — byte-based Cache / (Cache + Origin)
Data Center Usage — the number of distinct regions your traffic passed through in the selected year

The monthly breakdown table lists each month with Total / Cache / Origin / HEIMWALL / Billed columns. Click a month for the daily breakdown, click a day for the region breakdown.