Chronicle soar data export limit

From Chronicle soar, while i attempting to download data from the search field, I am encountering a limit set at 1000 records. This restriction prevents me from downloading more than 1000 records. Upon reviewing the request payload, I confirmed that the limit is indeed set to 1000.

Is there a way to modify this setting to allow for unlimited data downloads?

Ali_Charu_0-1730449492584.png

0 4 384
4 REPLIES 4

Hello, 

in the search for what component? Are you talking about case search? 

yes, We have integrated SOAR with QRadar, and when an offense is created in QRadar, a new case is generated in Google SOAR. Currently, I am attempting to export a report of cases from the past month, which contains over 1900 cases. However, I am restricted to downloading only 1000 case details as a CSV file. When I click on "Export," I receive a message indicating that the export limit is set to 1000.

Is there a way to modify this limit to allow for the export of all cases?




Ali_Charu_0-1730466167704.png

 

Iโ€™m going to say probably not without an FR.  There may be an API call that could export more.  

However, Iโ€™d personally just export it twice and be done with it. 

Which API are you calling?
I would look if that API supports pagination (i.e. size 1000, page2)