---
title: Updates an event
---

[Skip to content](#_top)

[API Reference](https://developers.cloudflare.com/api/go)

[Cloudforce One](https://developers.cloudflare.com/api/go/resources/cloudforce_one)

[Threat Events](https://developers.cloudflare.com/api/go/resources/cloudforce_one/subresources/threat_events)

Copy Markdown

Open in **Claude**Open in **ChatGPT**Open in **Cursor**

---

**Copy Markdown****View as Markdown**

# Updates an event

client.CloudforceOne.ThreatEvents.Edit(ctx, eventID, params) (\*[ThreatEventEditResponse](<https://developers.cloudflare.com/api/go/resources/cloudforce_one#(resource)%20cloudforce_one.threat_events%20%3E%20(model)%20ThreatEventEditResponse%20%3E%20(schema)>), error)

PATCH/accounts/{account\_id}/cloudforce-one/events/{event\_id}

Partially updates a threat event in Cloudforce One, modifying specific fields without replacing the entire event.

##### Security

API Token

The preferred authorization scheme for interacting with the Cloudflare API. [Create a token](https://developers.cloudflare.com/fundamentals/api/get-started/create-token/).

**Example:**`Authorization: Bearer Sn3lZJTBX6kkg7OdcBUAxOO963GEIyGQqnFTOFYY`

##### Accepted Permissions (at least one required)

`Cloudforce One Write`

##### ParametersExpand Collapse

eventID string

Event UUID.

[Link to this property](<#(resource)%20cloudforce_one.threat_events%20%3E%20(method)%20edit%20%3E%20(params)%20default%20%3E%20(param)%20event_id%20%3E%20(schema)>)

<details>

<summary>

params ThreatEventEditParams

</summary>

AccountID param.Field\[string]

Path param: Account ID.

<a href="#(resource)%20cloudforce_one.threat_events%20%3E%20(method)%20edit%20%3E%20(params)%20default%20%3E%20(param)%20account_id">Link to this property</a>

DatasetID param.Field\[string]

Body param: Dataset ID containing the event to update.

<a href="#(resource)%20cloudforce_one.threat_events%20%3E%20(method)%20edit%20%3E%20(params)%20default%20%3E%20(param)%20datasetId">Link to this property</a>

Attacker param.Field\[string]Optional

Body param

<a href="#(resource)%20cloudforce_one.threat_events%20%3E%20(method)%20edit%20%3E%20(params)%20default%20%3E%20(param)%20attacker">Link to this property</a>

AttackerCountry param.Field\[string]Optional

Body param

<a href="#(resource)%20cloudforce_one.threat_events%20%3E%20(method)%20edit%20%3E%20(params)%20default%20%3E%20(param)%20attackerCountry">Link to this property</a>

Category param.Field\[string]Optional

Body param

<a href="#(resource)%20cloudforce_one.threat_events%20%3E%20(method)%20edit%20%3E%20(params)%20default%20%3E%20(param)%20category">Link to this property</a>

CreatedAt param.Field\[<a href="https://developers.cloudflare.com/api/go/resources/cloudforce_one/subresources/threat_events/methods/edit#(resource)%20cloudforce_one.threat_events%20%3E%20(method)%20edit%20%3E%20(params)%20default%20%3E%20(param)%20createdAt%20%3E%20(schema)">Time</a>]Optional

Body param

formatdate-time

<a href="#(resource)%20cloudforce_one.threat_events%20%3E%20(method)%20edit%20%3E%20(params)%20default%20%3E%20(param)%20createdAt">Link to this property</a>

Date param.Field\[<a href="https://developers.cloudflare.com/api/go/resources/cloudforce_one/subresources/threat_events/methods/edit#(resource)%20cloudforce_one.threat_events%20%3E%20(method)%20edit%20%3E%20(params)%20default%20%3E%20(param)%20date%20%3E%20(schema)">Time</a>]Optional

Body param

formatdate-time

<a href="#(resource)%20cloudforce_one.threat_events%20%3E%20(method)%20edit%20%3E%20(params)%20default%20%3E%20(param)%20date">Link to this property</a>

Event param.Field\[string]Optional

Body param

<a href="#(resource)%20cloudforce_one.threat_events%20%3E%20(method)%20edit%20%3E%20(params)%20default%20%3E%20(param)%20event">Link to this property</a>

Indicator param.Field\[string]Optional

Body param

<a href="#(resource)%20cloudforce_one.threat_events%20%3E%20(method)%20edit%20%3E%20(params)%20default%20%3E%20(param)%20indicator">Link to this property</a>

IndicatorType param.Field\[string]Optional

Body param

<a href="#(resource)%20cloudforce_one.threat_events%20%3E%20(method)%20edit%20%3E%20(params)%20default%20%3E%20(param)%20indicatorType">Link to this property</a>

Insight param.Field\[string]Optional

Body param

<a href="#(resource)%20cloudforce_one.threat_events%20%3E%20(method)%20edit%20%3E%20(params)%20default%20%3E%20(param)%20insight">Link to this property</a>

<details>

<summary>

Raw param.Field\[<a href="https://developers.cloudflare.com/api/go/resources/cloudforce_one/subresources/threat_events/methods/edit#(resource)%20cloudforce_one.threat_events%20%3E%20(method)%20edit%20%3E%20(params)%20default%20%3E%20(param)%20raw%20%3E%20(schema)">ThreatEventEditParamsRaw</a>]Optional

Body param

</summary>

Data map\[string, unknown]Optional

<a href="#(resource)%20cloudforce_one.threat_events%20%3E%20(method)%20edit%20%3E%20(params)%20default%20%3E%20(param)%20raw%20%3E%20(schema)%20%3E%20(property)%20data">Link to this property</a>

Source stringOptional

<a href="#(resource)%20cloudforce_one.threat_events%20%3E%20(method)%20edit%20%3E%20(params)%20default%20%3E%20(param)%20raw%20%3E%20(schema)%20%3E%20(property)%20source">Link to this property</a>

TLP stringOptional

<a href="#(resource)%20cloudforce_one.threat_events%20%3E%20(method)%20edit%20%3E%20(params)%20default%20%3E%20(param)%20raw%20%3E%20(schema)%20%3E%20(property)%20tlp">Link to this property</a>

</details>

<a href="#(resource)%20cloudforce_one.threat_events%20%3E%20(method)%20edit%20%3E%20(params)%20default%20%3E%20(param)%20raw">Link to this property</a>

TargetCountry param.Field\[string]Optional

Body param

<a href="#(resource)%20cloudforce_one.threat_events%20%3E%20(method)%20edit%20%3E%20(params)%20default%20%3E%20(param)%20targetCountry">Link to this property</a>

TargetIndustry param.Field\[string]Optional

Body param

<a href="#(resource)%20cloudforce_one.threat_events%20%3E%20(method)%20edit%20%3E%20(params)%20default%20%3E%20(param)%20targetIndustry">Link to this property</a>

TLP param.Field\[string]Optional

Body param

<a href="#(resource)%20cloudforce_one.threat_events%20%3E%20(method)%20edit%20%3E%20(params)%20default%20%3E%20(param)%20tlp">Link to this property</a>

</details>

[Link to this property](<#(resource)%20cloudforce_one.threat_events%20%3E%20(method)%20edit%20%3E%20(params)%20default>)

##### ReturnsExpand Collapse

<details>

<summary>

type ThreatEventEditResponse struct{…}

</summary>

Attacker string

<a href="#(resource)%20cloudforce_one.threat_events%20%3E%20(model)%20ThreatEventEditResponse%20%3E%20(schema)%20%3E%20(property)%20attacker">Link to this property</a>

AttackerCountry string

<a href="#(resource)%20cloudforce_one.threat_events%20%3E%20(model)%20ThreatEventEditResponse%20%3E%20(schema)%20%3E%20(property)%20attackerCountry">Link to this property</a>

AttackerCountryAlpha3 string

<a href="#(resource)%20cloudforce_one.threat_events%20%3E%20(model)%20ThreatEventEditResponse%20%3E%20(schema)%20%3E%20(property)%20attackerCountryAlpha3">Link to this property</a>

Category string

<a href="#(resource)%20cloudforce_one.threat_events%20%3E%20(model)%20ThreatEventEditResponse%20%3E%20(schema)%20%3E%20(property)%20category">Link to this property</a>

DatasetID string

<a href="#(resource)%20cloudforce_one.threat_events%20%3E%20(model)%20ThreatEventEditResponse%20%3E%20(schema)%20%3E%20(property)%20datasetId">Link to this property</a>

Date string

<a href="#(resource)%20cloudforce_one.threat_events%20%3E%20(model)%20ThreatEventEditResponse%20%3E%20(schema)%20%3E%20(property)%20date">Link to this property</a>

Event string

<a href="#(resource)%20cloudforce_one.threat_events%20%3E%20(model)%20ThreatEventEditResponse%20%3E%20(schema)%20%3E%20(property)%20event">Link to this property</a>

HasChildren bool

<a href="#(resource)%20cloudforce_one.threat_events%20%3E%20(model)%20ThreatEventEditResponse%20%3E%20(schema)%20%3E%20(property)%20hasChildren">Link to this property</a>

Indicator string

<a href="#(resource)%20cloudforce_one.threat_events%20%3E%20(model)%20ThreatEventEditResponse%20%3E%20(schema)%20%3E%20(property)%20indicator">Link to this property</a>

IndicatorType string

<a href="#(resource)%20cloudforce_one.threat_events%20%3E%20(model)%20ThreatEventEditResponse%20%3E%20(schema)%20%3E%20(property)%20indicatorType">Link to this property</a>

IndicatorTypeID float64

<a href="#(resource)%20cloudforce_one.threat_events%20%3E%20(model)%20ThreatEventEditResponse%20%3E%20(schema)%20%3E%20(property)%20indicatorTypeId">Link to this property</a>

KillChain float64

<a href="#(resource)%20cloudforce_one.threat_events%20%3E%20(model)%20ThreatEventEditResponse%20%3E%20(schema)%20%3E%20(property)%20killChain">Link to this property</a>

MitreAttack \[]string

<a href="#(resource)%20cloudforce_one.threat_events%20%3E%20(model)%20ThreatEventEditResponse%20%3E%20(schema)%20%3E%20(property)%20mitreAttack">Link to this property</a>

MitreCapec \[]string

<a href="#(resource)%20cloudforce_one.threat_events%20%3E%20(model)%20ThreatEventEditResponse%20%3E%20(schema)%20%3E%20(property)%20mitreCapec">Link to this property</a>

NumReferenced float64

<a href="#(resource)%20cloudforce_one.threat_events%20%3E%20(model)%20ThreatEventEditResponse%20%3E%20(schema)%20%3E%20(property)%20numReferenced">Link to this property</a>

NumReferences float64

<a href="#(resource)%20cloudforce_one.threat_events%20%3E%20(model)%20ThreatEventEditResponse%20%3E%20(schema)%20%3E%20(property)%20numReferences">Link to this property</a>

RawID string

<a href="#(resource)%20cloudforce_one.threat_events%20%3E%20(model)%20ThreatEventEditResponse%20%3E%20(schema)%20%3E%20(property)%20rawId">Link to this property</a>

Referenced \[]string

<a href="#(resource)%20cloudforce_one.threat_events%20%3E%20(model)%20ThreatEventEditResponse%20%3E%20(schema)%20%3E%20(property)%20referenced">Link to this property</a>

ReferencedIDs \[]float64

<a href="#(resource)%20cloudforce_one.threat_events%20%3E%20(model)%20ThreatEventEditResponse%20%3E%20(schema)%20%3E%20(property)%20referencedIds">Link to this property</a>

References \[]string

<a href="#(resource)%20cloudforce_one.threat_events%20%3E%20(model)%20ThreatEventEditResponse%20%3E%20(schema)%20%3E%20(property)%20references">Link to this property</a>

ReferencesIDs \[]float64

<a href="#(resource)%20cloudforce_one.threat_events%20%3E%20(model)%20ThreatEventEditResponse%20%3E%20(schema)%20%3E%20(property)%20referencesIds">Link to this property</a>

Tags \[]string

<a href="#(resource)%20cloudforce_one.threat_events%20%3E%20(model)%20ThreatEventEditResponse%20%3E%20(schema)%20%3E%20(property)%20tags">Link to this property</a>

TargetCountry string

<a href="#(resource)%20cloudforce_one.threat_events%20%3E%20(model)%20ThreatEventEditResponse%20%3E%20(schema)%20%3E%20(property)%20targetCountry">Link to this property</a>

TargetCountryAlpha3 string

<a href="#(resource)%20cloudforce_one.threat_events%20%3E%20(model)%20ThreatEventEditResponse%20%3E%20(schema)%20%3E%20(property)%20targetCountryAlpha3">Link to this property</a>

TargetIndustry string

<a href="#(resource)%20cloudforce_one.threat_events%20%3E%20(model)%20ThreatEventEditResponse%20%3E%20(schema)%20%3E%20(property)%20targetIndustry">Link to this property</a>

TLP string

<a href="#(resource)%20cloudforce_one.threat_events%20%3E%20(model)%20ThreatEventEditResponse%20%3E%20(schema)%20%3E%20(property)%20tlp">Link to this property</a>

UUID string

<a href="#(resource)%20cloudforce_one.threat_events%20%3E%20(model)%20ThreatEventEditResponse%20%3E%20(schema)%20%3E%20(property)%20uuid">Link to this property</a>

Insight stringOptional

<a href="#(resource)%20cloudforce_one.threat_events%20%3E%20(model)%20ThreatEventEditResponse%20%3E%20(schema)%20%3E%20(property)%20insight">Link to this property</a>

ReleasabilityID stringOptional

<a href="#(resource)%20cloudforce_one.threat_events%20%3E%20(model)%20ThreatEventEditResponse%20%3E%20(schema)%20%3E%20(property)%20releasabilityId">Link to this property</a>

</details>

[Link to this property](<#(resource)%20cloudforce_one.threat_events%20%3E%20(model)%20ThreatEventEditResponse%20%3E%20(schema)>)

### Updates an event

Go

HTTPTypeScriptPythonGoTerraform

```
package main

import (
  "context"
  "fmt"

  "github.com/cloudflare/cloudflare-go"
  "github.com/cloudflare/cloudflare-go/cloudforce_one"
  "github.com/cloudflare/cloudflare-go/option"
)

func main() {
  client := cloudflare.NewClient(
    option.WithAPIToken("Sn3lZJTBX6kkg7OdcBUAxOO963GEIyGQqnFTOFYY"),
  )
  response, err := client.CloudforceOne.ThreatEvents.Edit(
    context.TODO(),
    "event_id",
    cloudforce_one.ThreatEventEditParams{
      AccountID: cloudflare.F("account_id"),
      DatasetID: cloudflare.F("9b769969-a211-466c-8ac3-cb91266a066a"),
    },
  )
  if err != nil {
    panic(err.Error())
  }
  fmt.Printf("%+v\n", response.UUID)
}
```

200 example

```
{
  "attacker": "Flying Yeti",
  "attackerCountry": "CN",
  "attackerCountryAlpha3": "CHN",
  "category": "Domain Resolution",
  "datasetId": "dataset-example-id",
  "date": "2022-04-01T00:00:00Z",
  "event": "An attacker registered the domain domain.com",
  "hasChildren": true,
  "indicator": "domain.com",
  "indicatorType": "domain",
  "indicatorTypeId": 5,
  "killChain": 0,
  "mitreAttack": [
    " "
  ],
  "mitreCapec": [
    " "
  ],
  "numReferenced": 0,
  "numReferences": 0,
  "rawId": "453gw34w3",
  "referenced": [
    " "
  ],
  "referencedIds": [
    0
  ],
  "references": [
    " "
  ],
  "referencesIds": [
    0
  ],
  "tags": [
    "malware"
  ],
  "targetCountry": "US",
  "targetCountryAlpha3": "USA",
  "targetIndustry": "Agriculture",
  "tlp": "amber",
  "uuid": "12345678-1234-1234-1234-1234567890ab",
  "insight": "insight",
  "releasabilityId": "releasabilityId"
}
```

##### Returns Examples

200 example

```
{
  "attacker": "Flying Yeti",
  "attackerCountry": "CN",
  "attackerCountryAlpha3": "CHN",
  "category": "Domain Resolution",
  "datasetId": "dataset-example-id",
  "date": "2022-04-01T00:00:00Z",
  "event": "An attacker registered the domain domain.com",
  "hasChildren": true,
  "indicator": "domain.com",
  "indicatorType": "domain",
  "indicatorTypeId": 5,
  "killChain": 0,
  "mitreAttack": [
    " "
  ],
  "mitreCapec": [
    " "
  ],
  "numReferenced": 0,
  "numReferences": 0,
  "rawId": "453gw34w3",
  "referenced": [
    " "
  ],
  "referencedIds": [
    0
  ],
  "references": [
    " "
  ],
  "referencesIds": [
    0
  ],
  "tags": [
    "malware"
  ],
  "targetCountry": "US",
  "targetCountryAlpha3": "USA",
  "targetIndustry": "Agriculture",
  "tlp": "amber",
  "uuid": "12345678-1234-1234-1234-1234567890ab",
  "insight": "insight",
  "releasabilityId": "releasabilityId"
}
```