User Guide
Also available as:
PDF

Exporting Search Information

You can export the contents of a query or search. This option can be very useful after you've refined your search to display only the relevant information for a cybersecurity issue and you would like to send this information to another SOC team member.

To export a query, complete the following steps:

  1. Click the Settings tab, then click the Objects tab.

  2. Select the object that you want to view.

    You can export the dashboard, searches, or visualization. To export the contents of a search, click Searches, then click the check box next to the search you want to export.

  3. Click Export to select a location to which to write the exported JSON.

    [Note]Note

    Exported dashboards do not include their associated index patterns. Re-create the index patterns manually before importing saved dashboards to a Kibana instance running on another Elasticsearch cluster.