Exports

Audit Logs exports CSV files from Cases and Processes. Exports are read-only and reflect the record that is currently loaded.

Where to export

Page	What is exported
Cases	Every event of the loaded case
Processes	Every event of the loaded process

The Explorer does not currently have an export control. To download the events for an investigation, open the case or process and export from there.

Scope

• The export is not the whole database. It contains the events of the loaded case or process.
• All of that record's events are included, not just the visible page.
• If the record has no events, the file is empty.

Filenames

case_<case-number-or-uid>.csv
process_<name-or-id-or-uid>.csv

Format

• Encoding: UTF-8.
• Delimiter: comma.
• Timestamps: exported as recorded in the audit log (UTC). The on-screen tables show them converted to your timezone.
• Column names: the audit record fields (for example Timestamp, event_type, user_id), not the on-screen column labels.

Excel usually opens the file directly. If your locale uses a different list separator, use Excel's text import and select comma as the delimiter.

Privacy

Exports can contain user IDs, usernames, roles, IP addresses, session identifiers, and case details. Store and share them according to your organization's data policy.

Not available yet

• Explorer export.
• JSON export.
• Scheduled or emailed reports.
• Exporting a dashboard's chart data as a file.