POST /accounts/{account_id}/cloudforce-one/events/create
To create a dataset, see the Create Dataset endpoint. When datasetId parameter is unspecified, it will be created in a default dataset named Cloudforce One Threat Events.
Servers
- https://api.cloudflare.com/client/v4
Path parameters
| Name | Type | Required | Description |
|---|---|---|---|
account_id |
String | Yes |
Account ID. |
Request headers
| Name | Type | Required | Description |
|---|---|---|---|
Content-Type |
String | Yes |
The media type of the request body.
Default value: "application/json" |
Request body fields
| Name | Type | Required | Description |
|---|---|---|---|
datasetId |
String | No | |
indicatorType |
String | No | |
accountId |
Number | No | |
insight |
String | No | |
event |
String | Yes | |
targetIndustry |
String | No | |
indicator |
String | No | |
tlp |
String | Yes | |
date |
String | Yes | |
targetCountry |
String | No | |
category |
String | Yes | |
indicators[] |
Array | No |
Array of indicators for this event. Supports multiple indicators per event for complex scenarios. |
indicators[].indicatorType |
String | Yes |
The type of indicator (e.g., DOMAIN, IP, JA3, HASH) |
indicators[].value |
String | Yes |
The indicator value (e.g., domain name, IP address, hash) |
attacker |
String | No | |
tags[] |
Array | No | |
attackerCountry |
String | No | |
raw |
Object | Yes | |
raw.source |
String | No | |
raw.data |
Object | Yes | |
raw.tlp |
String | No |
How to start integrating
- Add HTTP Task to your workflow definition.
- Search for the API you want to integrate with and click on the name.
- This loads the API reference documentation and prepares the Http request settings.
- Click Test request to test run your request to the API and see the API's response.