Skip to content
LogoLogScale DocumentationFull Library Knowledge Base Release Notes Integrations Query Examples Training API GraphQL APISearch Archives Contacting Support
Help button for documentation
    • LogScale System Repository Schema Guide
    • The humio Repository
      • Query data in the humio Repository
    • The humio-activity Repository
        • Action
        • Action/Action
        • AggregateAlert/Alert
        • AggregateAlert/Query
        • Alert/Action
        • Alert/Alert
        • Alert/Query
        • Fdr/Entity
        • Fdr/Ingest
        • FilterAlert/Alert
        • FilterAlert/Query
        • GraphQL/Deprecation
        • PermissionAssignment/groupAssignments
        • PermissionAssignment/numberOfGroups
        • PermissionAssignment/numberOfUsers
        • PermissionAssignment/userAssignments
        • PermissionAssignment/userPermissionCounts
        • Query
        • Request
        • ScheduledSearch/Action
        • ScheduledSearch/Query
        • ScheduledSearch/Schedule
        • ScheduledSearch/ScheduledSearch
        • SystemPrivilege/ChangeSystemPermission
        • SystemPrivilege/ManageOrganizations
      • Alert, Scheduled Search, and Scheduled Report Errors and Resolutions
    • The humio-audit Repository
      • Common humio-audit Structures
        • humio-audit Actor Structure
          • Query Actor Data
        • humio-audit Query Structure
      • humio-audit Event types
      • Examples of queries for humio-audit
    • The humio-fleet Repository
    • The humio-measurements Repository
    • The humio-metrics Repository
      • Node-Level Metrics
      • Object-Level Metrics
      • Example queries
    • The humio-usage Repository
      • humio-organization-usage View
    • The humio-trigger-execution-info Repository
Falcon LogScale Documentation
/ LogScale System Repository Schema Guide
/ The humio-audit Repository
/ humio-audit Event types

Audit Log Event dataspace.query.export-file

A query was exported to a file

Field TypeTypeValueAvailabilityDescription
actorActorType   Actor, as defined in humio-audit Actor Structure
csvFieldsExportedOption[Array[String]]   Fields included from CSV in exported file
exportedFileNameString   Exported file name, including file extension
queryIdString   ID of the related query audit log from dataspace.query
timestampZonedDateTime   Timestamp of the audited event
Support
  • Twitter
  • LinkedIn
  • Youtube

© 2025 CrowdStrike All other marks contained herein are the property of their respective owners.

Enter search term