indicator_feeds

Creates, updates, deletes, gets or lists an indicator_feeds resource.

Overview

Name	indicator_feeds
Type	Resource
Id	cloudflare.intel.indicator_feeds

Fields

The following fields are returned by SELECT queries:

get

Get indicator feed metadata

Name	Datatype	Description
id	integer	The unique identifier for the indicator feed
name	string	The name of the indicator feed
provider_id	string	The unique identifier for the provider
provider_name	string	The provider of the indicator feed
created_on	string (date-time)	The date and time when the data entry was created
description	string	The description of the example test
is_attributable	boolean	Whether the indicator feed can be attributed to a provider
is_downloadable	boolean	Whether the indicator feed can be downloaded
is_public	boolean	Whether the indicator feed is exposed to customers
latest_upload_status	string	Status of the latest snapshot uploaded (Mirroring, Unifying, Loading, Provisioning, Complete, Error)
modified_on	string (date-time)	The date and time when the data entry was last modified

Methods

The following methods are available for this resource:

Name	Accessible by	Required Params	Optional Params	Description
get	select	account_id, feed_id		Retrieves details for a specific custom threat indicator feed.
create	insert	account_id		Creates a new custom threat indicator feed for sharing threat intelligence data.
update	replace	account_id, feed_id		Revises details for a specific custom threat indicator feed.
snapshot	exec	account_id, feed_id		Revises the raw data entries in a custom threat indicator feed.

Parameters

Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.

Name	Datatype	Description
account_id	string	The Cloudflare account ID.
feed_id	string	The Intel indicator feed ID.

SELECT examples

get

Retrieves details for a specific custom threat indicator feed.

SELECT
id,
name,
provider_id,
provider_name,
created_on,
description,
is_attributable,
is_downloadable,
is_public,
latest_upload_status,
modified_on
FROM cloudflare.intel.indicator_feeds
WHERE account_id = '{{ account_id }}' -- required
AND feed_id = '{{ feed_id }}' -- required
;

INSERT examples

create

Creates a new custom threat indicator feed for sharing threat intelligence data.

INSERT INTO cloudflare.intel.indicator_feeds (
description,
name,
account_id
)
SELECT 
'{{ description }}',
'{{ name }}',
'{{ account_id }}'
RETURNING
errors,
messages,
result,
success
;

Manifest

# Description fields are for documentation purposes
- name: indicator_feeds
props:
  - name: account_id
    value: "{{ account_id }}"
    description: Required parameter for the indicator_feeds resource.
  - name: description
    value: "{{ description }}"
    description: |
      The description of the example test
  - name: name
    value: "{{ name }}"
    description: |
      The name of the indicator feed

REPLACE examples

update

Revises details for a specific custom threat indicator feed.

REPLACE cloudflare.intel.indicator_feeds
SET 
description = '{{ description }}',
is_attributable = {{ is_attributable }},
is_downloadable = {{ is_downloadable }},
is_public = {{ is_public }},
name = '{{ name }}'
WHERE 
account_id = '{{ account_id }}' --required
AND feed_id = '{{ feed_id }}' --required
RETURNING
errors,
messages,
result,
success;

Lifecycle Methods

snapshot

Revises the raw data entries in a custom threat indicator feed.

EXEC cloudflare.intel.indicator_feeds.snapshot 
@account_id='{{ account_id }}' --required, 
@feed_id='{{ feed_id }}' --required 
@@json=
'{
"source": "{{ source }}"
}'
;