Exporting event streams

To accelerate investigations, you can export events within an event stream to CSV or XLSX to share within your organization.

A series of fields are available for selection, so you can ensure only meaningful data is exported.

For exports containing more than 1 million events, please contact Fortinet Support.

How to export an event stream

1. In the FortiDLP Console, on the left-hand sidebar, click .
2. Click an event stream panel.
3. Optionally, filter for the relevant events. For details, see Viewing event streams.
4. On the top-right corner of either the Aggregations or Events tab, click Export.
   
5. Select the CSV or XLSX radio button based on your preferred file format.
6. Select the fields you want to export.
   
7. Click Export.

When the export completes, the file will be downloaded to your computer.