--- title: Reads an event --- [Skip to content](#_top) [API Reference](https://developers.cloudflare.com/api/python) [Cloudforce One](https://developers.cloudflare.com/api/python/resources/cloudforce_one) [Threat Events](https://developers.cloudflare.com/api/python/resources/cloudforce_one/subresources/threat_events) Copy Markdown Open in **Claude**Open in **ChatGPT**Open in **Cursor** --- **Copy Markdown****View as Markdown** # Reads an event Deprecated: Use datasets.events.get instead (GET /accounts/{account\_id}/cloudforce-one/events/dataset/{dataset\_id}/events/{event\_id}). cloudforce\_one.threat\_events.get(strevent\_id, ThreatEventGetParams\*\*kwargs) -> [ThreatEventGetResponse]() GET/accounts/{account\_id}/cloudforce-one/events/{event\_id} This Method is deprecated. Please use /events/dataset/:dataset\_id/events/:event\_id instead. ##### Security API Token The preferred authorization scheme for interacting with the Cloudflare API. [Create a token](https://developers.cloudflare.com/fundamentals/api/get-started/create-token/). **Example:**`Authorization: Bearer Sn3lZJTBX6kkg7OdcBUAxOO963GEIyGQqnFTOFYY` ##### Accepted Permissions (at least one required) `Cloudforce One Write``Cloudforce One Read` ##### ParametersExpand Collapse account\_id: str Account ID. [Link to this property](<#(resource)%20cloudforce_one.threat_events%20%3E%20(method)%20get%20%3E%20(params)%20default%20%3E%20(param)%20account_id%20%3E%20(schema)>) event\_id: str Event UUID. [Link to this property](<#(resource)%20cloudforce_one.threat_events%20%3E%20(method)%20get%20%3E%20(params)%20default%20%3E%20(param)%20event_id%20%3E%20(schema)>) ##### ReturnsExpand Collapse
class ThreatEventGetResponse: … attacker: str Link to this property attacker\_country: str Link to this property attacker\_country\_alpha3: str Link to this property category: str Link to this property dataset\_id: str Link to this property date: str Link to this property event: str Link to this property has\_children: bool Link to this property indicator: str Link to this property indicator\_type: str Link to this property indicator\_type\_id: float Link to this property kill\_chain: float Link to this property mitre\_attack: List\[str] Link to this property mitre\_capec: List\[str] Link to this property num\_referenced: float Link to this property num\_references: float Link to this property raw\_id: str Link to this property referenced: List\[str] Link to this property referenced\_ids: List\[float] Link to this property references: List\[str] Link to this property references\_ids: List\[float] Link to this property tags: List\[str] Link to this property target\_country: str Link to this property target\_country\_alpha3: str Link to this property target\_industry: str Link to this property tlp: str Link to this property uuid: str Link to this property insight: Optional\[str] Link to this property releasability\_id: Optional\[str] Link to this property
[Link to this property](<#(resource)%20cloudforce_one.threat_events%20%3E%20(model)%20threat_event_get_response%20%3E%20(schema)>) ### Reads an event Python HTTPTypeScriptPythonGoTerraform ``` import os from cloudflare import Cloudflare client = Cloudflare( api_token=os.environ.get("CLOUDFLARE_API_TOKEN"), # This is the default and can be omitted ) threat_event = client.cloudforce_one.threat_events.get( event_id="event_id", account_id="account_id", ) print(threat_event.uuid) ``` 200 example ``` { "attacker": "Flying Yeti", "attackerCountry": "CN", "attackerCountryAlpha3": "CHN", "category": "Domain Resolution", "datasetId": "dataset-example-id", "date": "2022-04-01T00:00:00Z", "event": "An attacker registered the domain domain.com", "hasChildren": true, "indicator": "domain.com", "indicatorType": "domain", "indicatorTypeId": 5, "killChain": 0, "mitreAttack": [ " " ], "mitreCapec": [ " " ], "numReferenced": 0, "numReferences": 0, "rawId": "453gw34w3", "referenced": [ " " ], "referencedIds": [ 0 ], "references": [ " " ], "referencesIds": [ 0 ], "tags": [ "malware" ], "targetCountry": "US", "targetCountryAlpha3": "USA", "targetIndustry": "Agriculture", "tlp": "amber", "uuid": "12345678-1234-1234-1234-1234567890ab", "insight": "insight", "releasabilityId": "releasabilityId" } ``` ##### Returns Examples 200 example ``` { "attacker": "Flying Yeti", "attackerCountry": "CN", "attackerCountryAlpha3": "CHN", "category": "Domain Resolution", "datasetId": "dataset-example-id", "date": "2022-04-01T00:00:00Z", "event": "An attacker registered the domain domain.com", "hasChildren": true, "indicator": "domain.com", "indicatorType": "domain", "indicatorTypeId": 5, "killChain": 0, "mitreAttack": [ " " ], "mitreCapec": [ " " ], "numReferenced": 0, "numReferences": 0, "rawId": "453gw34w3", "referenced": [ " " ], "referencedIds": [ 0 ], "references": [ " " ], "referencesIds": [ 0 ], "tags": [ "malware" ], "targetCountry": "US", "targetCountryAlpha3": "USA", "targetIndustry": "Agriculture", "tlp": "amber", "uuid": "12345678-1234-1234-1234-1234567890ab", "insight": "insight", "releasabilityId": "releasabilityId" } ```