---
title: "Bulk export security monitoring rules"
method: POST
path: "/api/v2/security_monitoring/rules/bulk_export"
tags: ["Security Monitoring"]
---

# Bulk export security monitoring rules

`POST /api/v2/security_monitoring/rules/bulk_export`

Export a list of security monitoring rules as a ZIP file containing JSON rule definitions.
The endpoint accepts a list of rule IDs and returns a ZIP archive where each rule is
saved as a separate JSON file named after the rule.

## Request body

- SecurityMonitoringRuleBulkExportPayload — Payload for bulk exporting security monitoring rules.
  - `data` SecurityMonitoringRuleBulkExportData, required — Data for bulk exporting security monitoring rules.
    - `attributes` SecurityMonitoringRuleBulkExportAttributes, required — Attributes for bulk exporting security monitoring rules.
      - `ruleIds` string[], required — List of rule IDs to export. Each rule will be included in the resulting ZIP file as a separate JSON file.
    - `id` string — Request ID.
    - `type` 'security_monitoring_rules_bulk_export', required — The type of the resource.

## Response `200`

OK

## Other responses

- `400` — Bad Request
- `403` — Not Authorized
- `404` — Not Found
- `429` — Too many requests

---

[API](https://skmtc.dev/datadog/apis/api-v2.md) · [All operations](https://skmtc.dev/datadog/apis/api-v2/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/datadog/api-v2/revisions/da68bf029e4c/schema)