download raw from UDM query

[jdavisson_CYD]

Ref: https://cloud.google.com/chronicle/docs/investigation/udm-search#save_the_set_of_columns

It appears the documented feature Download as CSV (including raw logs) has been removed with recent UI changes.

raw is also not available as a column for CSV output.

is there a recommended way to download one or more of the raw log results from a UDM query in the SIEM UI?

[Rene_Figueroa · Accepted solution]

Hi @jdavisson_CYD this feature should be included in the new UI by end of first week of June.