{"command":{"effect":"write","timeoutSeconds":30,"inputSchema":{"type":"object","description":"Creates multiple events in one dataset. `datasetId` is required; to find dataset IDs, use `threat-intel datasets list`. Set `includeCreatedEvents` to return the UUIDs of the created events.","properties":{"path":{"type":"object","properties":{"account_id":{"description":"Account ID.","type":"string"}},"required":["account_id"],"additionalProperties":false},"body":{"type":"object","properties":{"data":{"type":"array","items":{"properties":{"accountId":{"type":"number","examples":[123456]},"attacker":{"type":["string","null"],"examples":["Flying Yeti"]},"attackerCountry":{"type":"string","examples":["CN"]},"category":{"type":"string","examples":["Domain Resolution"]},"datasetId":{"type":"string","examples":["durableObjectName"]},"date":{"type":"string","format":"date-time","examples":["2022-04-01T00:00:00Z"]},"event":{"type":"string","examples":["An attacker registered the domain domain.com"]},"indicator":{"type":"string","examples":["domain.com"]},"indicatorType":{"type":"string","examples":["domain"]},"indicators":{"description":"Array of indicators for this event. Supports multiple indicators per event for complex scenarios.","type":"array","items":{"properties":{"indicatorType":{"description":"The type of indicator (e.g., DOMAIN, IP, JA3, HASH)","type":"string","examples":["domain"]},"value":{"description":"The indicator value (e.g., domain name, IP address, hash)","type":"string","examples":["malicious.com"]}},"required":["value","indicatorType"],"type":"object"}},"insight":{"type":"string","examples":["This domain was likely registered for phishing purposes"]},"raw":{"type":"object","properties":{"data":{"type":["object","null"],"additionalProperties":true},"source":{"type":"string","examples":["example.com"]},"tlp":{"type":"string","examples":["amber"]}},"required":["data"]},"tags":{"type":"array","items":{"type":"string","examples":["malware"]}},"targetCountry":{"type":"string","examples":["US"]},"targetIndustry":{"type":"string","examples":["Agriculture"]},"tlp":{"type":"string","examples":["amber"]}},"required":["date","category","event","tlp","raw"],"type":"object"}},"datasetId":{"type":"string","examples":["durableObjectName"]},"includeCreatedEvents":{"description":"When true, response includes array of created event UUIDs and shard IDs. Useful for tracking which events were created and where.","type":"boolean"}},"required":["data","datasetId"]}},"required":["path"],"additionalProperties":false},"name":"Create events in bulk","id":"cloudflare.post_eventcreatebulk","example":{"path":{"account_id":"example"}},"maxRequests":1,"summary":false}}