Exports give you every record matching a search, written to a file you download. Use an export — rather than paging cursors — when you need exhaustive, durable output.
Steps
Create the export
Send a search request with an export format. The response returns an export_id and a status; the export runs asynchronously. Poll for completion
Check the export until its status is complete. The response then includes a download location. Download the file
Fetch the download_url from the completed export. Exports support ndjson and csv.
Delete exports you no longer need with DELETE /v1/export/{export_id}; this removes the stored artifact.
Export vs. cursor vs. view
- Export — exhaustive, downloadable output of a large result set.
- Cursor — inspect a little deeper, interactively.
- View — a reusable, named result set you can re-read or run SQL against.
