How to get the notables into .CSV?

[AL3Z]

Hi,
I was wondering how we could download  the specific notables  into csv or text format from incident review panel in Splunk Enterprise  Security.

[abi2023]

1. Click on the "Actions" button for that notable and select "Download notable events".

2. In the "Download Notable Events" dialog box, select the format you want to use for the download (CSV or Text).

3. you need admin privilege 

[paulcurry]

Not sure you can from that Incident Review dashboard.  You should be able to export from a regular search using index=notable.  Just specify time frame and fields you need.