Exporting rules

Export rule data from the current report in CSV format so that you can further process the data or view it in Excel.

About this task

You must be an administrator to complete this task.


  1. On the IBM® Detection and Response Center page, click the Download icon.
  2. Enter a name for the CSV file and click Export.
    Tip: If you want to adjust the content to export, such as including attributes for Sigma or QRadar® rules, use the option to control column visibility and order (gear icon) on the report menu bar.

What to do next

Use the CSV file to further investigate your rules.