--- title: Reads an event --- [Skip to content](#_top) [API Reference](https://developers.cloudflare.com/api/go) [Cloudforce One](https://developers.cloudflare.com/api/go/resources/cloudforce_one) [Threat Events](https://developers.cloudflare.com/api/go/resources/cloudforce_one/subresources/threat_events) Copy Markdown Open in **Claude**Open in **ChatGPT**Open in **Cursor** --- **Copy Markdown****View as Markdown** # Reads an event Deprecated: Use datasets.events.get instead (GET /accounts/{account\_id}/cloudforce-one/events/dataset/{dataset\_id}/events/{event\_id}). client.CloudforceOne.ThreatEvents.Get(ctx, eventID, query) (\*[ThreatEventGetResponse](), error) GET/accounts/{account\_id}/cloudforce-one/events/{event\_id} This Method is deprecated. Please use /events/dataset/:dataset\_id/events/:event\_id instead. ##### Security API Token The preferred authorization scheme for interacting with the Cloudflare API. [Create a token](https://developers.cloudflare.com/fundamentals/api/get-started/create-token/). **Example:**`Authorization: Bearer Sn3lZJTBX6kkg7OdcBUAxOO963GEIyGQqnFTOFYY` ##### Accepted Permissions (at least one required) `Cloudforce One Write``Cloudforce One Read` ##### ParametersExpand Collapse eventID string Event UUID. [Link to this property](<#(resource)%20cloudforce_one.threat_events%20%3E%20(method)%20get%20%3E%20(params)%20default%20%3E%20(param)%20event_id%20%3E%20(schema)>)
query ThreatEventGetParams AccountID param.Field\[string] Account ID. Link to this property
[Link to this property](<#(resource)%20cloudforce_one.threat_events%20%3E%20(method)%20get%20%3E%20(params)%20default>) ##### ReturnsExpand Collapse
type ThreatEventGetResponse struct{…} Attacker string Link to this property AttackerCountry string Link to this property AttackerCountryAlpha3 string Link to this property Category string Link to this property DatasetID string Link to this property Date string Link to this property Event string Link to this property HasChildren bool Link to this property Indicator string Link to this property IndicatorType string Link to this property IndicatorTypeID float64 Link to this property KillChain float64 Link to this property MitreAttack \[]string Link to this property MitreCapec \[]string Link to this property NumReferenced float64 Link to this property NumReferences float64 Link to this property RawID string Link to this property Referenced \[]string Link to this property ReferencedIDs \[]float64 Link to this property References \[]string Link to this property ReferencesIDs \[]float64 Link to this property Tags \[]string Link to this property TargetCountry string Link to this property TargetCountryAlpha3 string Link to this property TargetIndustry string Link to this property TLP string Link to this property UUID string Link to this property Insight stringOptional Link to this property ReleasabilityID stringOptional Link to this property
[Link to this property](<#(resource)%20cloudforce_one.threat_events%20%3E%20(model)%20ThreatEventGetResponse%20%3E%20(schema)>) ### Reads an event Go HTTPTypeScriptPythonGoTerraform ``` package main import ( "context" "fmt" "github.com/cloudflare/cloudflare-go" "github.com/cloudflare/cloudflare-go/cloudforce_one" "github.com/cloudflare/cloudflare-go/option" ) func main() { client := cloudflare.NewClient( option.WithAPIToken("Sn3lZJTBX6kkg7OdcBUAxOO963GEIyGQqnFTOFYY"), ) threatEvent, err := client.CloudforceOne.ThreatEvents.Get( context.TODO(), "event_id", cloudforce_one.ThreatEventGetParams{ AccountID: cloudflare.F("account_id"), }, ) if err != nil { panic(err.Error()) } fmt.Printf("%+v\n", threatEvent.UUID) } ``` 200 example ``` { "attacker": "Flying Yeti", "attackerCountry": "CN", "attackerCountryAlpha3": "CHN", "category": "Domain Resolution", "datasetId": "dataset-example-id", "date": "2022-04-01T00:00:00Z", "event": "An attacker registered the domain domain.com", "hasChildren": true, "indicator": "domain.com", "indicatorType": "domain", "indicatorTypeId": 5, "killChain": 0, "mitreAttack": [ " " ], "mitreCapec": [ " " ], "numReferenced": 0, "numReferences": 0, "rawId": "453gw34w3", "referenced": [ " " ], "referencedIds": [ 0 ], "references": [ " " ], "referencesIds": [ 0 ], "tags": [ "malware" ], "targetCountry": "US", "targetCountryAlpha3": "USA", "targetIndustry": "Agriculture", "tlp": "amber", "uuid": "12345678-1234-1234-1234-1234567890ab", "insight": "insight", "releasabilityId": "releasabilityId" } ``` ##### Returns Examples 200 example ``` { "attacker": "Flying Yeti", "attackerCountry": "CN", "attackerCountryAlpha3": "CHN", "category": "Domain Resolution", "datasetId": "dataset-example-id", "date": "2022-04-01T00:00:00Z", "event": "An attacker registered the domain domain.com", "hasChildren": true, "indicator": "domain.com", "indicatorType": "domain", "indicatorTypeId": 5, "killChain": 0, "mitreAttack": [ " " ], "mitreCapec": [ " " ], "numReferenced": 0, "numReferences": 0, "rawId": "453gw34w3", "referenced": [ " " ], "referencedIds": [ 0 ], "references": [ " " ], "referencesIds": [ 0 ], "tags": [ "malware" ], "targetCountry": "US", "targetCountryAlpha3": "USA", "targetIndustry": "Agriculture", "tlp": "amber", "uuid": "12345678-1234-1234-1234-1234567890ab", "insight": "insight", "releasabilityId": "releasabilityId" } ```