--- title: Creates bulk events --- [Skip to content](#_top) [API Reference](https://developers.cloudflare.com/api/go) [Cloudforce One](https://developers.cloudflare.com/api/go/resources/cloudforce_one) [Threat Events](https://developers.cloudflare.com/api/go/resources/cloudforce_one/subresources/threat_events) Copy Markdown Open in **Claude**Open in **ChatGPT**Open in **Cursor** --- **Copy Markdown****View as Markdown** # Creates bulk events client.CloudforceOne.ThreatEvents.BulkNew(ctx, params) (\*[ThreatEventBulkNewResponse](), error) POST/accounts/{account\_id}/cloudforce-one/events/create/bulk The `datasetId` parameter must be defined. To list existing datasets (and their IDs) in your account, use the [`List Datasets`](https://developers.cloudflare.com/api/resources/cloudforce_one/subresources/threat_events/subresources/datasets/methods/list/) endpoint. ##### Security API Token The preferred authorization scheme for interacting with the Cloudflare API. [Create a token](https://developers.cloudflare.com/fundamentals/api/get-started/create-token/). **Example:**`Authorization: Bearer Sn3lZJTBX6kkg7OdcBUAxOO963GEIyGQqnFTOFYY` ##### Accepted Permissions (at least one required) `Cloudforce One Write``Cloudforce One Read` ##### ParametersExpand Collapse
params ThreatEventBulkNewParams AccountID param.Field\[string] Path param: Account ID. Link to this property
Data param.Field\[\[]ThreatEventBulkNewParamsData] Body param Category string Link to this property Date Time formatdate-time Link to this property Event string Link to this property
Raw ThreatEventBulkNewParamsDataRaw Data map\[string, unknown] Link to this property Source stringOptional Link to this property TLP stringOptional Link to this property
Link to this property TLP string Link to this property AccountID float64Optional Link to this property Attacker stringOptional Link to this property AttackerCountry stringOptional Link to this property DatasetID stringOptional Link to this property Indicator stringOptional Link to this property
Indicators \[]ThreatEventBulkNewParamsDataIndicatorOptional Array of indicators for this event. Supports multiple indicators per event for complex scenarios. IndicatorType string The type of indicator (e.g., DOMAIN, IP, JA3, HASH) Link to this property Value string The indicator value (e.g., domain name, IP address, hash) Link to this property
Link to this property IndicatorType stringOptional Link to this property Insight stringOptional Link to this property Tags \[]stringOptional Link to this property TargetCountry stringOptional Link to this property TargetIndustry stringOptional Link to this property
Link to this property DatasetID param.Field\[string] Body param Link to this property IncludeCreatedEvents param.Field\[bool]Optional Body param: When true, response includes array of created event UUIDs and shard IDs. Useful for tracking which events were created and where. Link to this property
[Link to this property](<#(resource)%20cloudforce_one.threat_events%20%3E%20(method)%20bulk_create%20%3E%20(params)%20default>) ##### ReturnsExpand Collapse
type ThreatEventBulkNewResponse struct{…} Detailed result of bulk event creation with auto-tag management CreatedEventsCount float64 Number of events created Link to this property CreatedTagsCount float64 Number of new tags created in SoT Link to this property ErrorCount float64 Number of errors encountered Link to this property QueuedIndicatorsCount float64 Number of indicators queued for async processing Link to this property CreateBulkEventsRequestID stringOptional Correlation ID for async indicator processing formatuuid Link to this property
CreatedEvents \[]ThreatEventBulkNewResponseCreatedEventOptional Array of created events with UUIDs and shard locations. Only present when includeCreatedEvents=true EventIndex float64 Original index in the input data array Link to this property ShardID string Dataset ID of the shard where the event was created Link to this property UUID string UUID of the created event formatuuid Link to this property
Link to this property
Errors \[]ThreatEventBulkNewResponseErrorOptional Array of error details Error string Error message Link to this property EventIndex float64 Index of the event that caused the error Link to this property
Link to this property
[Link to this property](<#(resource)%20cloudforce_one.threat_events%20%3E%20(model)%20ThreatEventBulkNewResponse%20%3E%20(schema)>) ### Creates bulk events Go HTTPTypeScriptPythonGoTerraform ``` package main import ( "context" "fmt" "time" "github.com/cloudflare/cloudflare-go" "github.com/cloudflare/cloudflare-go/cloudforce_one" "github.com/cloudflare/cloudflare-go/option" ) func main() { client := cloudflare.NewClient( option.WithAPIToken("Sn3lZJTBX6kkg7OdcBUAxOO963GEIyGQqnFTOFYY"), ) response, err := client.CloudforceOne.ThreatEvents.BulkNew(context.TODO(), cloudforce_one.ThreatEventBulkNewParams{ AccountID: cloudflare.F("account_id"), Data: cloudflare.F([]cloudforce_one.ThreatEventBulkNewParamsData{cloudforce_one.ThreatEventBulkNewParamsData{ Category: cloudflare.F("Domain Resolution"), Date: cloudflare.F(time.Now()), Event: cloudflare.F("An attacker registered the domain domain.com"), Raw: cloudflare.F(cloudforce_one.ThreatEventBulkNewParamsDataRaw{ Data: cloudflare.F(map[string]interface{}{ "foo": "bar", }), }), TLP: cloudflare.F("amber"), }}), DatasetID: cloudflare.F("durableObjectName"), }) if err != nil { panic(err.Error()) } fmt.Printf("%+v\n", response.CreatedEventsCount) } ``` 200 example ``` { "createdEventsCount": 0, "createdTagsCount": 0, "errorCount": 0, "queuedIndicatorsCount": 0, "createBulkEventsRequestId": "182bd5e5-6e1a-4fe4-a799-aa6d9a6ab26e", "createdEvents": [ { "eventIndex": 0, "shardId": "shardId", "uuid": "182bd5e5-6e1a-4fe4-a799-aa6d9a6ab26e" } ], "errors": [ { "error": "error", "eventIndex": 0 } ] } ``` ##### Returns Examples 200 example ``` { "createdEventsCount": 0, "createdTagsCount": 0, "errorCount": 0, "queuedIndicatorsCount": 0, "createBulkEventsRequestId": "182bd5e5-6e1a-4fe4-a799-aa6d9a6ab26e", "createdEvents": [ { "eventIndex": 0, "shardId": "shardId", "uuid": "182bd5e5-6e1a-4fe4-a799-aa6d9a6ab26e" } ], "errors": [ { "error": "error", "eventIndex": 0 } ] } ```