LEleakradar
Raw Search

Queue a raw export job

Changed on

Queue an asynchronous export job for raw search results. Mode 'rows' exports a CSV of matching lines, mode 'parts' exports a text snapshot of matching parts.

Important: This export only includes results that have been previously unlocked via Mass Unlock. No points are consumed during export. Use /search/raw/unlock/task to unlock results first.

post/search/raw/export

Request

Query parameters

exportstring required

Export mode: rows (CSV of matching lines) or parts (text snapshot of matching parts).

dedupboolean

Deduplicate the export. rows: drop duplicate lines (whitespace-normalized, case-insensitive). parts: drop blocks with identical content.

Request body

qstring nullable

Optional full text query to match within raw blocks. Quotes are ignored for the length check. When omitted or empty, you must provide at least one filter among container_id, exts, categories, file_name.

container_idinteger nullable

Restrict the search to a specific container id.

extsstring[] nullable

List of file extensions to include (case-insensitive, without leading dot).

exts_notstring[] nullable

List of file extensions to exclude (case-insensitive, without leading dot).

categoriesstring[] nullable

Filter results by raw file category. Applied after the search query.

categories_notstring[] nullable

Exclude these raw file categories. Applied after the search query.

file_namestring[] nullable

Case-insensitive wildcards that must match the entry name (OR by default, AND if force_and=true).

file_name_notstring[] nullable

Case-insensitive wildcards that must NOT match the entry name.

folder_namestring[] nullable

Case-insensitive match on the folder holding the block (OR by default, AND if force_and=true). By default the value must appear anywhere in the folder path; with folder_name_exact=true it must be a whole folder at any depth. Leading and trailing slashes are ignored.

folder_name_notstring[] nullable

Folders to exclude, same matching rules as folder_name. Not a standalone selector: a search using only folder_name_not is rejected, provide q or another positive filter.

force_andboolean nullable

When true, require all file_name values to match, and all folder_name values to match (AND instead of OR within each list).

file_name_match_type'contains' | 'starts_with' | 'ends_with' | 'exact'

How a raw file-name or folder value is matched.

Separate from AdvancedTextMatchType on purpose: raw has an EXACT mode the stealer fields do not, and adding it there would widen a contract that seven surfaces already depend on.

file_name_not_match_type'contains' | 'starts_with' | 'ends_with' | 'exact'

How a raw file-name or folder value is matched.

Separate from AdvancedTextMatchType on purpose: raw has an EXACT mode the stealer fields do not, and adding it there would widen a contract that seven surfaces already depend on.

folder_name_match_type'contains' | 'starts_with' | 'ends_with' | 'exact'

How a raw file-name or folder value is matched.

Separate from AdvancedTextMatchType on purpose: raw has an EXACT mode the stealer fields do not, and adding it there would widen a contract that seven surfaces already depend on.

folder_name_not_match_type'contains' | 'starts_with' | 'ends_with' | 'exact'

How a raw file-name or folder value is matched.

Separate from AdvancedTextMatchType on purpose: raw has an EXACT mode the stealer fields do not, and adding it there would widen a contract that seven surfaces already depend on.

file_name_exactboolean nullable

Deprecated, use file_name_match_type and file_name_not_match_type. When true and neither is given, both file_name and file_name_not are matched as exact.

folder_name_exactboolean nullable

Deprecated, use folder_name_match_type and folder_name_not_match_type. When true and neither is given, both folder_name and folder_name_not are matched as exact.

q_exactboolean nullable

When true, the q term must match on word boundaries: '4.4.4.4' will not match '4.4.4.400'. Applied as a content post-filter (no effect without q).

include_termsstring[] nullable

Extra content terms that must ALL be present, on top of q: a block is kept only if its content contains q AND every term listed here (substring, case-insensitive). Min 4 characters per term, max 20 terms. Unlike exclude_terms this IS a positive selector, so it can be used without q.

exclude_termsstring[] nullable

Content terms to exclude: any block whose content contains one of these (substring, case-insensitive) is removed from the results. Min 4 characters per term, max 20 terms. Not a standalone selector: a search using only exclude_terms is rejected, provide q or another positive filter.

ingested_at_minstring date-time nullable

Filter results ingested on or after this datetime (inclusive).

ingested_at_maxstring date-time nullable

Filter results ingested on or before this datetime (inclusive).

Example request

{
  "q": "example.com"
}

Response

Export job queued successfully.

statusstring required

Export job status: 'queued', 'processing', 'completed', or 'failed'.

messagestring required

Human-readable status message.

export_idinteger required

ID of the export job. Use this to check status or download the result.

Example response

{
  "export_id": 1234,
  "message": "Your export request has been queued. Check the Exports page for progress.",
  "status": "queued"
}

Changes

  • 2a4d24c5f38dRevision changes
    • info

      added the new optional request property

  • eb219e94d077Revision changes
    • info

      added the new optional request property

    • info

      added the new optional request property

    • info

      added the new optional request property

    • info

      added the new optional request property