> ## Documentation Index
> Fetch the complete documentation index at: https://developers.everflow.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Get Network Situation Summary

> Network-wide Traffic Health summary — aggregate counts of active domains, domains with and without incidents, active incidents, and blocklist incidents broken down by vendor (EasyList, HetrixTools, Google Threat Intelligence), plus the mean time to resolution. Send an empty object `{}` for the default network-wide rollup.


A network-wide Traffic Health summary — aggregate counts of active domains, domains with and without incidents, and blocklist incidents broken down by vendor. Send an empty object `{}` for the default rollup.


## OpenAPI

````yaml openapi/traffic-health.yaml post /networks/traffic/situation
openapi: 3.0.3
info:
  title: Everflow Network API - Traffic Health
  description: >
    Read endpoints for Traffic Health — the operational health of the domains
    and hosting IPs behind your tracking and conversion links. Surfaces uptime /
    SSL / DNS / expiry incidents, blocklist reputation, the remediation tasks
    that need your attention, and per-domain assignment summaries.


    Traffic Health has two tiers. The capabilities available to a network are
    reported by `GET /networks/traffic/access`. Endpoints marked **Traffic
    Health Premium** (domain and IP blocklist reputation) require the premium
    package; on a network without it they return an authorization error rather
    than data.


    For how these incidents and reputation flags work, see [Traffic Health:
    Incidents & Reputation
    Management](https://helpdesk.everflow.io/customer/traffic-health-incidents-and-reputation-management).
  version: 1.0.0
servers:
  - url: https://api.eflow.team/v1
security: []
tags:
  - name: Traffic Health
paths:
  /networks/traffic/situation:
    post:
      tags:
        - Traffic Health
      summary: Get Network Situation Summary
      description: >
        Network-wide Traffic Health summary — aggregate counts of active
        domains, domains with and without incidents, active incidents, and
        blocklist incidents broken down by vendor (EasyList, HetrixTools, Google
        Threat Intelligence), plus the mean time to resolution. Send an empty
        object `{}` for the default network-wide rollup.
      requestBody:
        required: false
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/SituationFilter'
      responses:
        '200':
          description: ''
          content:
            application/json:
              example:
                network_id: 1
                active_domain_count: 9
                active_domain_with_incident_count: 3
                active_domain_without_incident_count: 6
                active_domain_with_blacklist_incident_count: 1
                active_domain_without_blacklist_incident_count: 8
                active_incident_count: 4
                active_domain_blacklist_incident_count: 2
                active_easylist_domain_blacklist_incident_count: 0
                active_hetrix_tools_domain_blacklist_incident_count: 0
                active_google_threat_intelligence_domain_blacklist_incident_count: 2
                active_ip_address_blacklist_incident_count: 0
                mean_time_to_resolution_seconds: 0
              schema:
                $ref: '#/components/schemas/SituationSummary'
      security:
        - API Key: []
components:
  schemas:
    SituationFilter:
      type: object
      description: Optional filters. Send an empty object `{}` for the default rollup.
    SituationSummary:
      type: object
      properties:
        network_id:
          type: integer
        active_domain_count:
          type: integer
        active_domain_with_incident_count:
          type: integer
        active_domain_without_incident_count:
          type: integer
        active_domain_with_blacklist_incident_count:
          type: integer
        active_domain_without_blacklist_incident_count:
          type: integer
        active_incident_count:
          type: integer
        active_domain_blacklist_incident_count:
          type: integer
        active_easylist_domain_blacklist_incident_count:
          type: integer
        active_hetrix_tools_domain_blacklist_incident_count:
          type: integer
        active_google_threat_intelligence_domain_blacklist_incident_count:
          type: integer
        active_ip_address_blacklist_incident_count:
          type: integer
        mean_time_to_resolution_seconds:
          type: integer
          description: Mean time to resolution for resolved incidents, in seconds.
  securitySchemes:
    API Key:
      type: apiKey
      in: header
      name: X-Eflow-Api-Key

````