Content Exports

Overview

Nuclei allows users to export event content directly from the UI based on the filters applied in the Conversations view or from the Exports page. Exports are processed asynchronously in the background and made available as a downloadable ZIP archive.

The following export formats are supported:

• JSON
• EML

This capability is designed for customers who need to package matching event content for downstream review, retention, or handoff to other compliance workflows.

Supported Features

Nuclei supports the following related capabilities for event content exports:

• Create an export from the Conversations page using the current search filters
• Create an export directly from the Exports page
• Filter exports by date range, keyword, feed, and identity
• Track export progress and status from the Exports page
• Download completed exports from the export detail page
• Continue using the Nuclei platform while exports process in the background

Scope

Exports include the event content that matches the selected filters at the time the export is created.

Supported Filters

The following filter types are supported when creating an export:

• Date range
• Search text
• Source selection
• Identity selection

JSON Output

JSON exports package one JSON file per exported event.

When available, JSON exports also include:

• Archived media files
• Archived transcript files

EML Output

EML exports package one EML file per exported event.

When available, EML exports also include related content embedded as MIME parts, including:

• Archived media
• Archived transcripts

Getting Started

To create an event content export:

1. Log in to Nuclei.
2. Navigate to Events > Conversations and apply the desired filters, or navigate to Exports and select New Export.
3. Select Export Results.
4. Enter an export name.
5. Choose the desired export format: JSON or EML.
6. Review the selected filters and date range.
7. Select Create Export.
8. Navigate to Exports to monitor status and download the export once complete.

Export Behavior

The following behavior applies to event content exports:

• Exports are processed asynchronously.
• Export requests are accepted immediately and typically begin processing shortly after creation.
• Export progress is updated while the export is running.
• Completed exports are downloaded as a ZIP archive.
• Download links are temporary. If a link expires, reopen the export detail page to generate a new download link.
• If no matching events are found, the export completes without a downloadable archive.

Performance Expectations

Export completion time depends on several factors, including:

• Total number of matched events
• Average event size
• Whether media or transcripts are included
• Selected export format

As a conservative planning guide:

• Up to 10,000 light-content events typically complete within 10 to 30 minutes
• Around 100,000 light-content events typically complete within 1 to 4 hours
• Around 1,000,000 events should generally be planned as a same-day or overnight export
• EML exports and attachment-heavy exports may take materially longer than JSON exports with the same event count
• Very large exports should be treated as asynchronous background jobs and may be best planned as same-day or overnight workflows

Concurrency and Scale

Nuclei is designed to process exports using scalable background infrastructure.

As a practical guideline:

• Multiple exports can be processed in parallel
• Export requests may complete at different times depending on size and content richness
• Customers should treat large exports as background jobs rather than interactive downloads

More Information

For more information on Event Content Exports and related capabilities, please contact Proofpoint Support or your Proofpoint sales team.