How can I export the full set of results from my query? Is there a limit on CSV exports from Panther Search?

Last updated: August 4, 2026

QUESTION

How can I export the full set of results from my query? Is there a limit on CSV exports from Panther Search?

ANSWER

The search functionality on our platform is optimized for efficiency, which means there are certain limitations in place. The limit for CSV exports from the Panther Search page is up to 1 GB per file. If your query results exceed this limit, consider narrowing your search criteria or using filters to reduce the dataset. Alternatively, run multiple smaller exports to capture all the data.

If you wish to download the whole set of results you can use the workflows below:

Downloading Full Results Using Search

  1. Perform your desired search on the Search page.

  2. In the upper-right corner of the results table, click Share:

  3. Select one of the menu options:

    • (If there are 1000 results or fewer) Download CSV: Downloads a CSV of the results table.

    • (If there are more than 1000 results) Generate CSV: Panther begins creating a CSV file of results (up to 1 GB) asynchronously, noted by a pop-up in the lower-left corner of your Panther Console. For more details, refer to the Sharing a Search documentation.

Downloading Full Results Using Data Explorer

  1. Perform your desired search on the Search page.

  2. On the Search page, click on the Copy as SQL option. This action copies the SQL query generated by your search.

  3. Open the Data Explorer.

  4. Paste the copied SQL query into the query editor in Data Explorer.

  5. Remove any LIMIT 999 statements from the SQL query. 

  6. Execute the modified query in Data Explorer to retrieve the complete set of results.

  7. Click the "Download CSV" button.

Note: Data Explorer has a configured result size limit of 100MB. If your results exceed 100MB, please check the below methods for possible workarounds.

Downloading Full Results using Scheduled Queries

If your result set is larger than 100 MB, there is a workaround:

  1. Run your query in Data Explorer.

  2. Click Save As and save it as a Scheduled Query (see screenshot).

    image-f60a15d7.png

  3. Configure a long cadence so it doesn't run frequently, and set an appropriately large timeout.

  4. Enter the email address where you'd like the results delivered.

The query results will be sent to the configured email address. There's no need to enable the Attach CSV data to email option unless you specifically want the CSV attached directly to the email.

Our maximum export size for the scheduled query/email method is 10 GB

Downloading Full Results Using Panther API

  1. Perform your desired search on the Search page.

  2. On the Search page, click on the Copy as SQL option. This action copies the SQL query generated by your search.

  3. Remove any LIMIT 999 statements from the SQL query. 

  4. Execute your API calls, that will run your query following the steps on our Panther API documentation.