Exporting events

You can export information about events to a TSV file. The selection of events that will be exported to a TSV file depends on filter settings. The information is exported from the columns that are displayed in the events table. The columns in the exported file are populated with the available data even if they did not display in the events table in the Threat hunting section due to the special features of the SQL query.

To export information about events:

1. Follow the steps to open the events table.
2. Click the button in the top right corner of the events table and select Export TSV.

   The new export TSV file task is created in the KUMA Task Manager section.

3. Log in to the KUMA console and find the task you created in the Task Manager section.
4. Click the task type name and select Upload from the drop-down list.

   The TSV file will be downloaded using your browser's settings. By default, the file name is event-export-<date>_<time>.tsv.

The file is saved based on your web browser's settings.