The Network Data Analytics Function (NWDAF) is a 3GPP-standardized network function, introduced in Release 15, that collects data from across the 5G core, processes it into analytics, and exposes those insights back to other network functions so they can automate decisions such as policy setting, slice selection, and load-aware SMF or UPF selection. It is the mechanism by which the 5G core turns raw operational data into closed-loop automation—and 3GPP has deliberately standardized what data it examines and how analytics are exchanged, while leaving the internal algorithms themselves unstandardized.

What is the Network Data Analytics Function (NWDAF)?

NWDAF was specified from 5G's initial release, Release 15, and is designed to control the management of sophisticated network data, as set out in 3GPP TS 29.520. According to 3GPP's own description of the function, upon receiving an analytics request from a consumer, the NWDAF collects network data, service data, management data and/or UE performance data from dedicated data sources, then processes and generates analytics information to help the consumer improve user experience and optimize network performance.

The function's stated purpose is to enhance network performance, operational assurance and resource utilization, and to enable self-optimization and automated management. A study paper by India's Telecommunication Engineering Centre notes that 3GPP developed NWDAF as part of Release 15 to enable machine learning and to let operators monitor the status of a network slice or third-party application performance, making it the central point for analytics in the 5G core network.

Importantly, the standardization effort is deliberately bounded. The Telecommunication Engineering Centre's study paper records that 3GPP does not plan to standardize the algorithms the NWDAF uses, but rather the types of raw information it examines. This means two vendor implementations can differ substantially in how they compute analytics while remaining compliant—a point worth remembering when evaluating any NWDAF product claim.

NWDAF's Architecture in the 5G Service-Based Architecture (SBA)

The 5G core is built as a service-based architecture: control-plane functions such as the Access and Mobility Management Function (AMF), Session Management Function (SMF), Policy Control Function (PCF), Network Slice Selection Function (NSSF) and Unified Data Management (UDM) expose their capabilities to one another over HTTP-based APIs. The Telecommunication Engineering Centre's study paper describes this as a major shift in the telecom world toward stateless functions and API-based interfaces, replacing protocols like Diameter.

NWDAF fits into this architecture as one more service-based function. The ETSI-published version of TS 29.520 defines the Nnwdaf service-based interface—the set of services the NWDAF exhibits to the rest of the core. The specification's abbreviation list confirms the ecosystem it operates within: AMF, SMF, UPF, PCF, NSSF, NRF, NEF, OAM and Application Function all appear as named entities around the analytics function.

Within this ecosystem, NWDAF acts as a centralized analytics provider rather than distributing analytics capability across individual network functions. A NETSCOUT explainer describes NWDAF as a 3GPP standard method that collects data from user equipment, network functions, and operations, administration and maintenance (OAM) systems within the 5G core, cloud and edge networks, and uses that data for 5G analytics that enhance the end-user experience.