Skip to main content
Panther Knowledge Base

How do I download the contents of the Summarize tab in the Panther Data Explorer?

QUESTION

Is there an “Export as CSV” option when using the summarize feature in Data Explorer? I want to download a CSV of the results

ANSWER

 You can recreate the Summarize tab's setup with the following query and "Download CSV" from the Results page.

SELECT
  summary_column_name, -- change to suit your needs
  COUNT(summary_column_name) as row_count, -- change to suit your needs
  MIN(p_event_time) as first_seen,
  MAX(p_event_time) as last_seen
FROM
  panther_logs.public.your_log_type -- change to suit your needs
WHERE
  p_occurs_since('48 hours') -- change to suit your needs
GROUP BY summary_column_name -- change to suit your needs