> For the complete documentation index, see [llms.txt](https://docs.enginsight.com/docs/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.enginsight.com/docs/manual/english/platform-usage/siem/exports.md).

# Exports

Under Exports, you can find all export files that you created from the [data lake](/docs/manual/english/platform-usage/siem/data-lake.md).

***

<i class="fa-compass">:compass:</i> Navigate to **SIEM** → **Exports** to show a list of all data lake exports. If you have not created any exports yet or your existing exports have expired, this view is empty.

<figure><img src="https://2423388680-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FV7OrHgKXA0t1jankQBYf%2Fuploads%2FfujrNtSru3UWJTWbwbSi%2Fenginsight-screenshot-siem-exports.jpg?alt=media&amp;token=ce1ea3f1-6b77-498f-805b-1a05c4a3213f" alt=""><figcaption></figcaption></figure>

The [exports overview](#exports-overview) provides information such as:

* who created the export.
* which data lake filters the export is based on and the period covered by the exported data.
* the current status of the export.
* how long the export file will remain stored on the server.

You can also download or delete exports here.

***

## Navigation

<i class="fa-magnifying-glass">:magnifying-glass:</i> Click the **Text Search** field above the list and enter a search term of your choice to find specific list items more quickly.

<i class="fa-computer-mouse">:computer-mouse:</i> Click the **Refresh** icon <i class="fa-arrows-rotate-reverse">:arrows-rotate-reverse:</i> above the list to update all list items.

<i class="fa-computer-mouse-scrollwheel">:computer-mouse-scrollwheel:</i> Scroll down the list or adjust the number of results shown per page ![](https://2423388680-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FV7OrHgKXA0t1jankQBYf%2Fuploads%2FfjKACCt2SKXcFd3S7Xb5%2FEnginsight-EN-Results%20per%20Page.jpg?alt=media\&token=e1650160-7a41-4965-aaca-6975db758dbe) to view additional entries. Use the page navigation ![](https://content.gitbook.com/content/V7OrHgKXA0t1jankQBYf/blobs/wnxVw06QGoSsYjhwMJRF/Enginsight-Seitennavigation-2.jpg) to switch between pages.&#x20;

### Sorting List Items

<i class="fa-computer-mouse">:computer-mouse:</i> Click the **Sort** icon <i class="fa-sort">:sort:</i> next to a column name in the table header to sort by that column in ascending <i class="fa-angle-up">:angle-up:</i> or descending order <i class="fa-chevron-down">:chevron-down:</i> .

<i class="fa-computer-mouse">:computer-mouse:</i> Click the sort icon <i class="fa-bars-sort">:bars-sort:</i> above the list to adjust the priority of the applied sorting. A menu opens that shows all columns by which the list is currently sorted. Drag and drop the shown items to change the sorting priority.

### Deleting List Items

<i class="fa-computer-mouse">:computer-mouse:</i> Select the checkbox <i class="fa-square">:square:</i> next to a list item to select the corresponding item. Alternatively, select the checkbox in the table header to select all list items.

The number of selected list entries is now displayed next to the search field.

The **Delete** button <i class="fa-trash">:trash:</i> also appears in the upper-right corner. Click it, then confirm the message that appears by clicking **Delete**.

{% hint style="danger" %}
**Please note:** Deleted items cannot be restored.
{% endhint %}

***

## Exports: Overview

<figure><img src="https://2423388680-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FV7OrHgKXA0t1jankQBYf%2Fuploads%2F9bzK4HK4rfHOjdFDjqlD%2Fenginsight-screenshot-siem-exports%20overview.jpg?alt=media&amp;token=4d37b52c-b864-4410-8a9f-3126939f2634" alt=""><figcaption></figcaption></figure>

The exports overview is structured as a table.&#x20;

The following information is shown:

<table><thead><tr><th width="219.9453125">Column</th><th>Description</th></tr></thead><tbody><tr><td>Name</td><td><p>Shows the custom name of the export, the date and time it was created, and the date and time it was last modified.<br><br>The name and email address of the user who created the export are also shown.</p><p><br><i class="fa-computer-mouse">:computer-mouse:</i> Click the name of an export to navigate to the respective <a href="#exports-detail-view">detail view</a>.</p></td></tr><tr><td>Parameters</td><td><p>Shows the parameters configured in the data lake for the export.<br><br>The following parameters are shown:</p><ul><li><strong>Query</strong>: Shows the search query from the Data Lake's <a href="/docs/manual/english/platform-usage/siem/data-lake.md#free-text-search">text search</a>.</li><li><strong>Filter Query</strong>: Shows all <a href="/docs/manual/english/platform-usage/siem/data-lake.md#filter-for-fields">configured filters</a> as a string in raw query format.</li><li><strong>Sorting</strong>: Shows how the exported log entries are sorted, in this case by date. The sorting cannot be changed.</li><li><strong>Period</strong>: Shows the period covered by the exported data.</li></ul></td></tr><tr><td>TTL</td><td><p>Shows the exact date and time when the export's retention period (Time to Live; TTL) expires. From this point onward, the export is no longer stored on the server and the export file is no longer available for download.</p><p></p><p>For exports that have not yet expired, the remaining time until the TTL expires is also shown in hours. Expired exports are tagged with the <strong>Expired</strong> label.</p></td></tr><tr><td>Status</td><td><p>Shows the status of the export creation process.<br></p><p>The following statuses are available:</p><ul><li><strong>Processing</strong>: The data export from the data lake is currently in progress. The progress of the creation is shown as a percentage, together with the estimated time until completion.</li><li><i class="fa-octagon-check" style="color:$success;">:octagon-check:</i> <strong>Finished</strong>: The data export from the data lake was completed successfully. The compressed file size and selected format are shown.</li><li><i class="fa-circle-exclamation" style="color:$danger;">:circle-exclamation:</i> <strong>Export Error</strong>: The data export was cancelled due to an error.</li></ul></td></tr><tr><td>Action</td><td><p><i class="fa-computer-mouse">:computer-mouse:</i> Once the export has been completed successfully, click <strong>Download</strong> to download the export file in the selected format.</p><div data-gb-custom-block data-tag="hint" data-style="info" class="hint hint-info"><p>You can find the exported file in your browser's default download location.</p></div></td></tr></tbody></table>

***

## Export: Detail View

<i class="fa-computer-mouse">:computer-mouse:</i> Click the name of an export to navigate to the respective detail view.

<figure><img src="https://2423388680-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FV7OrHgKXA0t1jankQBYf%2Fuploads%2F3XcinH1jhK7qreMbOfo8%2Fenginsight-screenshot-siem-exports-detail%20view.jpg?alt=media&amp;token=00298214-85c1-436a-acdb-34a72ce4b099" alt=""><figcaption></figcaption></figure>

### Displayed Information

The following information is shown:

<table><thead><tr><th width="199.91015625">Option</th><th>Description</th></tr></thead><tbody><tr><td>Name</td><td>Shows the name that you entered for the export when the <a href="/docs/manual/english/platform-usage/siem/data-lake.md#export-logs">export was created</a>.</td></tr><tr><td>GUID</td><td>Shows the globally unique identifier for the created export.</td></tr><tr><td>Format</td><td>Shows the format that you selected when the export was created.</td></tr><tr><td>Query</td><td>Shows the search query from the data lake's <a href="/docs/manual/english/platform-usage/siem/data-lake.md#free-text-search">text search</a>.</td></tr><tr><td>Filter Query</td><td>Shows all <a href="/docs/manual/english/platform-usage/siem/data-lake.md#filter-for-fields">configured filters</a> as a string in raw query format.</td></tr><tr><td>Sorting</td><td>Shows how the export is sorted.</td></tr><tr><td>Period</td><td>Shows the period covered by the exported data.</td></tr><tr><td>TTL</td><td>Shows the exact date and time when the export's retention period expires. From this point onward, the export is no longer stored on the server and the export file is no longer available for download.</td></tr></tbody></table>

### Actions

The following actions are available for the export:

<table><thead><tr><th width="200.27734375">Option</th><th>Description</th></tr></thead><tbody><tr><td>Download (&#x3C;File Size>)</td><td><p><i class="fa-computer-mouse">:computer-mouse:</i> Click <strong>Download (&#x3C;File Size>)</strong> to download the export file.</p><div data-gb-custom-block data-tag="hint" data-style="info" class="hint hint-info"><p>You can find the exported file in your browser's default download location.</p></div></td></tr><tr><td>Back</td><td><i class="fa-computer-mouse">:computer-mouse:</i> Click <strong>Back</strong> to return to the list view.</td></tr><tr><td>Remove</td><td><p><i class="fa-computer-mouse">:computer-mouse:</i> Click <strong>Remove</strong> and confirm the prompt by clicking <strong>Remove</strong> to delete the export.</p><div data-gb-custom-block data-tag="hint" data-style="danger" class="hint hint-danger"><p><strong>Please note</strong>: Deleted export files cannot be recovered.</p></div></td></tr></tbody></table>

***
