Exporting event streams

To accelerate investigations, you can export events within an event stream to CSV or XLSX to share within your organization.

A series of fields are available for selection, so you can ensure only meaningful data is exported.

Please contact Fortinet Support for exports containing more than 1M events.

How to export an event stream

1. In the FortiDLP Console, on the left-hand sidebar, click .
2. Click an event stream panel.
3. Optionally, filter for the relevant events. For details, see Viewing event streams.
4. On the top-right corner of the page, click Export.
   
5. Select the CSV or XLSX radio button based on your preferred file format.
6. Select the fields you want to export.
   
7. Click Export.

When the export completes, the file will be downloaded to your computer.