Download a CSV file with event information

You can download a CSV file with events in an events table. Each event table shows the latest 500 events. However, you can download a CSV file to see up to 50,000 of the most recent events based on the dimension and filters you selected.

How to

  1. For threat or AUP events, in the navigation menu, select Monitoring > Events. Depending on the type of events you want to view, click the Threat Events or the AUP Events tab.
    Note: If you are trying the new Enterprise Center interface, in the navigation menu, select Threat Analytics > Events. Select the event type.
  2. For Security Connector events, in the navigation menu, select Monitoring > Activity. Click the Security Connector tab.
    Note: If you are trying the new Enterprise Center interface, in the navigation menu, select Threat Analytics > Activity > Security Connector.
  3. Filter the events as needed. For instructions, see Filter event data and Filter data based on date and time.
  4. If you haven’t done so already, select a dimension or event criteria.
  5. In the grouped events area, click the arrow icon to show the events associated with the selected dimension.
  6. Click Download CSV (All Events) to download the events that are associated with the dimension you selected.