Security investigation tool
You can export search results in the investigation tool to Google Sheets or to a CSV file.
Export search results to Google Sheets
- At the top of the search results table, click Export all.
- Enter an export name.
- Choose Google Sheets.
- Click Export.
The export displays below the search results table under Export action results. - To view the data, click the name of your export.
The export opens in Google Sheets in your My Drive folder.
Note the following when viewing search results:
- After you click Export all at the top of the table, a Google Sheet is created in your My Drive folder that includes the search results. Depending on the size of the results, the export process might take some time, and multiple Google Sheets might be created.
- Export limits vary depending on your Google Workspace edition:
- Google Workspace Enterprise Plus and Education Plus—The total results of the export are limited to 30 million rows (except for Gmail message searches, which are limited to 10,000 rows).
- All other Google Workspace editions—The total results of the export are limited to 100,000 rows (except for Gmail message searches, which are limited to 10,000 rows).
- While the export is in-progress, Google Sheets are created with a temporary name—for example, TMP-1-<title>. If multiple Google Sheets are created, additional files are named TMP-2-<title>, TMP-3-<title>, and so on. When the export process is completed, the files are automatically renamed to: <title> [1 of N], <title> [2 of N], and so on. If only one Google Sheet contains the exported data, the file is renamed to <title>.
- Sharing permissions for files with the exported search results are per your domain configuration. For example, if by default the files created will be shared with everyone in the company, then the exported data will also have this visibility.
Export search results to a CSV file
- At the top of the search results table, click Export all.
- Enter an export name.
- Choose Comma-separated values (.csv).
- Click Export.
To download the exported search results, click Tasks, and then click Download CSV.
Note: For all Google Workspace editions, the limit for CSV exports is 100,000 rows (except for Gmail message exports, which are limited to 10,000 rows).