POST /accounts/{account_id}/cloudforce-one/events/create/bulk
The datasetId parameter must be defined. To list existing datasets (and their IDs) in your account, use the List Datasets endpoint.
Servers
- https://api.cloudflare.com/client/v4
Path parameters
| Name | Type | Required | Description |
|---|---|---|---|
account_id |
String | Yes |
Account ID. |
Request headers
| Name | Type | Required | Description |
|---|---|---|---|
Content-Type |
String | Yes |
The media type of the request body.
Default value: "application/json" |
Request body fields
| Name | Type | Required | Description |
|---|---|---|---|
data[] |
Array | Yes | |
data[].datasetId |
String | No | |
data[].indicatorType |
String | No | |
data[].accountId |
Number | No | |
data[].insight |
String | No | |
data[].event |
String | Yes | |
data[].targetIndustry |
String | No | |
data[].indicator |
String | No | |
data[].tlp |
String | Yes | |
data[].date |
String | Yes | |
data[].targetCountry |
String | No | |
data[].category |
String | Yes | |
data[].indicators[] |
Array | No |
Array of indicators for this event. Supports multiple indicators per event for complex scenarios. |
data[].indicators[].indicatorType |
String | Yes |
The type of indicator (e.g., DOMAIN, IP, JA3, HASH) |
data[].indicators[].value |
String | Yes |
The indicator value (e.g., domain name, IP address, hash) |
data[].attacker |
String | No | |
data[].tags[] |
Array | No | |
data[].attackerCountry |
String | No | |
data[].raw |
Object | Yes | |
data[].raw.source |
String | No | |
data[].raw.data |
Object | Yes | |
data[].raw.tlp |
String | No | |
datasetId |
String | Yes |
How to start integrating
- Add HTTP Task to your workflow definition.
- Search for the API you want to integrate with and click on the name.
- This loads the API reference documentation and prepares the Http request settings.
- Click Test request to test run your request to the API and see the API's response.