---
title: "Get"
method: GET
path: "/api/v1/systemlog/exports/{export_id}"
tags: ["System Log Exporter"]
---

# Get

`GET /api/v1/systemlog/exports/{export_id}`

Get a system log export by ID

## Path parameters

- `export_id` string, required — The exportId field.

## Response `200`

The ExportServiceGetResponse message contains the system log exporter object.

- C1ApiSystemlogV1ExportServiceGetResponse — The ExportServiceGetResponse message contains the system log exporter object.
  - `exporter` C1ApiSystemlogV1Exporter — The Exporter message. This message contains a oneof named export_to. Only a single field of the following list may be set at a time: - datasource
    - `createdAt` string, date-time, nullable
    - `datasource` C1ApiSystemlogV1ExportToDatasource — The ExportToDatasource message.
      - `datasourceId` string — The datasourceId field.
      - `format` 'EXPORT_FORMAT_UNSPECIFIED' | 'EXPORT_FORMAT_OCSF_JSON_ZSTD' | 'EXPORT_FORMAT_OCSF_JSON_GZIP' — The format field.
      - `prefix` string — The prefix field.
    - `deletedAt` string, date-time, nullable
    - `displayName` string — The displayName field.
    - `exportId` string — The exportId field.
    - `state` 'EXPORT_STATE_UNSPECIFIED' | 'EXPORT_STATE_EXPORTING' | 'EXPORT_STATE_WAITING' | 'EXPORT_STATE_ERROR' — The state field.
    - `updatedAt` string, date-time, nullable
    - `watermarkEventId` string — we've synchorized this far

## Changes

> 33 revisions in range; 1 could not be searched.

- **2025-04-10** `17f9f3bcedd5` — 1 info
  - endpoint added

[Change history](https://skmtc.dev/conductorone/apis/c1-api/changes/api/v1/systemlog/exports/:export_id/get.md)

---

[API](https://skmtc.dev/conductorone/apis/c1-api.md) · [All operations](https://skmtc.dev/conductorone/apis/c1-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/conductorone/c1-api/revisions/f2cf3228f366/schema)