List all saved event queries

client.CloudforceOne.ThreatEvents.Queries.List(ctx, query) (*[]ThreatEventQueryListResponse, error)

GET/accounts/{account_id}/cloudforce-one/events/queries

Retrieve all saved event queries for the account

Security

API Token

The preferred authorization scheme for interacting with the Cloudflare API. Create a token.

Example:Authorization: Bearer Sn3lZJTBX6kkg7OdcBUAxOO963GEIyGQqnFTOFYY

Accepted Permissions (at least one required)

Cloudforce One WriteCloudforce One Read

ParametersExpand Collapse

query ThreatEventQueryListParams

AccountID param.Field[string]

Account ID.

ReturnsExpand Collapse

type ThreatEventQueryListResponse []ThreatEventQueryListResponse

ID int64

Unique identifier for the saved query

AccountID int64

Account ID

AlertEnabled bool

Whether alerts are enabled

AlertRollupEnabled bool

Whether alert rollup is enabled

CreatedAt string

Creation timestamp

Name string

Name of the saved query

QueryJson string

JSON string containing the query parameters

RuleEnabled bool

Whether rule is enabled

UpdatedAt string

Last update timestamp

UserEmail string

Email of the user who created the query

CustomThreatFeedID int64Optional

Intel Indicator Feed ID (numeric)

RuleListID stringOptional

WAF rules list ID for blocking

RuleScope stringOptional

Scope for the rule

List all saved event queries

package main

import (
  "context"
  "fmt"

  "github.com/cloudflare/cloudflare-go"
  "github.com/cloudflare/cloudflare-go/cloudforce_one"
  "github.com/cloudflare/cloudflare-go/option"
)

func main() {
  client := cloudflare.NewClient(
    option.WithAPIToken("Sn3lZJTBX6kkg7OdcBUAxOO963GEIyGQqnFTOFYY"),
  )
  queries, err := client.CloudforceOne.ThreatEvents.Queries.List(context.TODO(), cloudforce_one.ThreatEventQueryListParams{
    AccountID: cloudflare.F("account_id"),
  })
  if err != nil {
    panic(err.Error())
  }
  fmt.Printf("%+v\n", queries)
}

[
  {
    "id": 0,
    "account_id": 0,
    "alert_enabled": true,
    "alert_rollup_enabled": true,
    "created_at": "created_at",
    "name": "name",
    "query_json": "query_json",
    "rule_enabled": true,
    "updated_at": "updated_at",
    "user_email": "user_email",
    "custom_threat_feed_id": 0,
    "rule_list_id": "rule_list_id",
    "rule_scope": "rule_scope"
  }
]

Returns Examples

[
  {
    "id": 0,
    "account_id": 0,
    "alert_enabled": true,
    "alert_rollup_enabled": true,
    "created_at": "created_at",
    "name": "name",
    "query_json": "query_json",
    "rule_enabled": true,
    "updated_at": "updated_at",
    "user_email": "user_email",
    "custom_threat_feed_id": 0,
    "rule_list_id": "rule_list_id",
    "rule_scope": "rule_scope"
  }
]