Skip to main content
Skip table of contents

Manually sharing Finder content


The Finder is able to export content either to the clipboard or to a file in XML format, regardless of the content being local to an Engine or centralized. The XML can be later imported into another system, again with the help of the Finder.

We exclude from this discussion the content that is local to the Finder itself (sessions and custom actions) or non-sharable (tags). See the reference article on local and shared content content for more information.

Exporting content

To share an item, such as an investigation:

  1. Log in to the Finder.

  2. Locate the investigation on the left-hand side accordion panel of the Finder.

  3. Right-click the name of the investigation and select Export:

    • Click Investigation to clipboard to copy the contents of the investigation to the clipboard.

    • Click Investigation to file... to save the contents of the investigation to an XML file.

If you have organized your investigations in folders, right-click the name of a folder and select Export to actually export all the investigations in the folder. To export all the investigations that are visible from the Finder at once, right-click the header of the section Investigations (or in the empty area within the section) and select the Export option. Again, when exporting multiple investigations, choose whether you want to export the Investigations to clipboard or the Investigations to file....

Importing content

To import the previously exported investigation into another Engine:

  1. Open a Finder session in the other Engine.

  2. Right-click the header of the Investigations section or in the empty area of the section and select Import from the menu.

  3. Depending on how you exported the investigations:

    • Select Investigation from clipboard, if you copied the contents of the investigation to the clipboard.

    • Select Investigation from file..., if you saved the contents of the investigation to an XML file.

If any of the imported investigation already exists in the destination Engine, the Finder displays a dialog for resolving the conflicts.

Other sharable content

The method described above using investigations as an example works with other types of content as well. Apply the same method to export and import:

  • Investigations

  • Investigation-based alerts

  • One-click investigations

  • Categories

  • Metrics

  • Services

  • Campaigns

  • Scores

  • Remote actions

Note that you can manually export and import not only content that is local to an Engine, but also centralized content. Although centralized content is shared by definition, its sharing capabilities are limited to the set of Engines managed by one Portal. Therefore, you may still want to export centralized content to Engines managed by different Portals. For example, this is specially useful for bringing content from a pre-production environment to a production environment.



JavaScript errors detected

Please note, these errors can depend on your browser setup.

If this problem persists, please contact our support.