## Creates bulk DOS event with relationships and indicators

`cloudforce_one.threat_events.bulk_create_relationships(ThreatEventBulkCreateRelationshipsParams**kwargs)  -> ThreatEventBulkCreateRelationshipsResponse`

**post** `/accounts/{account_id}/cloudforce-one/events/create/bulk/relationships`

This method is deprecated. Please use `event_create_bulk` instead

### Parameters

- `account_id: str`

  Account ID.

- `data: Iterable[Data]`

  - `category: str`

  - `date: Union[str, datetime]`

  - `event: str`

  - `raw: DataRaw`

    - `data: Optional[Dict[str, object]]`

    - `source: Optional[str]`

    - `tlp: Optional[str]`

  - `tlp: str`

  - `account_id: Optional[float]`

  - `attacker: Optional[str]`

  - `attacker_country: Optional[str]`

  - `dataset_id: Optional[str]`

  - `indicator: Optional[str]`

  - `indicators: Optional[Iterable[DataIndicator]]`

    Array of indicators for this event. Supports multiple indicators per event for complex scenarios.

    - `indicator_type: str`

      The type of indicator (e.g., DOMAIN, IP, JA3, HASH)

    - `value: str`

      The indicator value (e.g., domain name, IP address, hash)

  - `indicator_type: Optional[str]`

  - `insight: Optional[str]`

  - `tags: Optional[Sequence[str]]`

  - `target_country: Optional[str]`

  - `target_industry: Optional[str]`

- `dataset_id: str`

### Returns

- `class ThreatEventBulkCreateRelationshipsResponse: …`

  Result of bulk relationship creation operation

  - `created_events_count: float`

    Number of events created

  - `created_indicators_count: float`

    Number of indicators created

  - `created_relationships_count: float`

    Number of relationships created

  - `error_count: float`

    Number of errors encountered

  - `errors: Optional[List[Error]]`

    Array of error details

    - `error: str`

      Error message

    - `event_index: float`

      Index of the event that caused the error

### Example

```python
import os
from datetime import datetime
from cloudflare import Cloudflare

client = Cloudflare(
    api_token=os.environ.get("CLOUDFLARE_API_TOKEN"),  # This is the default and can be omitted
)
response = client.cloudforce_one.threat_events.bulk_create_relationships(
    account_id="account_id",
    data=[{
        "category": "Domain Resolution",
        "date": datetime.fromisoformat("2022-04-01T00:00:00"),
        "event": "An attacker registered the domain domain.com",
        "raw": {
            "data": {
                "foo": "bar"
            }
        },
        "tlp": "amber",
    }],
    dataset_id="durableObjectName",
)
print(response.created_events_count)
```

#### Response

```json
{
  "createdEventsCount": 0,
  "createdIndicatorsCount": 0,
  "createdRelationshipsCount": 0,
  "errorCount": 0,
  "errors": [
    {
      "error": "error",
      "eventIndex": 0
    }
  ]
}
```