Export AutoFocus Tag, Search, and Indicator Data
You can now export AutoFocus™ tag, search,
and indicator information into text, CSV, and JSON formats. Only
the content that is displayed on the given page can be exported. For
example, if you configure your sample search screen to show
First
Seen
, WildFire Verdict
, SHA256
,
and Tags
with up to 50 results, your data
export options are limited to those items. If you want to export
more data elements, then configure the page to display the relevant
options.To export the tag page data, you must select an output
format (options include Text, CSV, and JSON) and then the data type.
Only one data type can be selected per text file-based export, however
the CSV and JSON formats support exportation of all available columns
shown on a page.
- Navigate to a Search, Tag, or Indicator Store page and configure it to display the information you want to export. For example, add additional columns to a search page to export that content.In the following example,Threat Typehas been added to theIndicator Storepage and becomes available as a data element for exportation.
- Click (
) to open the Export Datapage. - Select the export data options.
- Select the export file format. The number of data types that AutoFocus can export depends on the file format.
- Text—AutoFocus exports a single user-selected data type into a text file format.
- CSV—AutoFocus exports all information on a page into a table format using the comma-separated values (CSV) file format.
- JSON—AutoFocus exports either all information on a page or a single user-selected data type into the JavaScript Object Notation file format.
- Select the data type and sorting arrangement.
- Select a data type option from theDatadrop-down.
- (Optional) SelectSortto rearrange the entries in ascending order except for dates, which are in descending order.
- (Optional) SelectUniqueto remove duplicate entries from the export list.Sorting and arrangement options are available depending on the selected data type and file format.
- Downloadthe JSON, text, or CSV file.
- Next step:Use the Indicator Store to:
