Skip to main content

overwatch stats

Display statistics from the audit log.

Usage

overwatch stats [options]

Options

OptionDescription
--since <duration>Stats since time (e.g., 1h, 1d, 7d)
--jsonOutput in JSON format

Examples

Overall Statistics

overwatch stats
Output:
Audit Statistics
================

Total Operations: 1,247
  Allowed: 1,189 (95.3%)
  Denied: 58 (4.7%)

By Risk Level:
  safe: 203
  read: 847
  write: 156
  destructive: 32
  dangerous: 9

By Server:
  postgres: 523
  filesystem: 412
  github: 312

Top 10 Tools:
  query: 498
  read_file: 312
  list_directory: 100
  write_file: 89
  ...

Today’s Statistics

overwatch stats --since 1d

Last Week

overwatch stats --since 7d

JSON Output

overwatch stats --json
{
  "total": 1247,
  "allowed": 1189,
  "denied": 58,
  "byRiskLevel": {
    "safe": 203,
    "read": 847,
    "write": 156,
    "destructive": 32,
    "dangerous": 9
  },
  "byServer": {
    "postgres": 523,
    "filesystem": 412,
    "github": 312
  },
  "topTools": [
    {"name": "query", "count": 498},
    {"name": "read_file", "count": 312}
  ]
}

Insights

Statistics help you understand:
  • Security posture: High denial rate may indicate attack attempts
  • Usage patterns: Which tools are used most frequently
  • Risk profile: Distribution of operations by risk level
  • Policy tuning: Identify tools that could be auto-allowed