Export

The Export page lets you export data in content packs.

Figure 1. Export page

Export page

General

You can export data in content packs, which are files in JavaScript Object Notation (JSON) format that you can open and read with a text reader.

Content packs

Content packs are a reporting and query feature that packages multiple templates into a single file for team collaboration. A single content pack can contain one or more:
  • Reports
  • Queries
  • Dashboards
  • Alert playbooks
    Note:
    When you select Alerts Playbooks, you get the option to choose Alert Rules associated with the Playbooks.

Content packs package data in a single file, which can then be distributed to a team of people. They can then be edited and used across multiple systems. This is especially useful in complex reporting arrangements, such as compliance with government regulations, or hunting for a specific threat.

The file expands so you can add other information in the JSON format to the content pack. The Nozomi Networks product ignores data that it doesn’t understand and continues to parse the file. This lets you add data for other systems to the content pack.

Note:
When you export a dashboard and insert the related content pack into a new Guardian instance, the dashboards load and function the same as those from the original Guardian. Imported dashboards include all the queries and widgets associated with the original saved dashboards.