---
title: "Export galaxy clusters"
method: POST
path: "/galaxies/export/{galaxyId}"
tags: ["Galaxies"]
---

# Export galaxy clusters

`POST /galaxies/export/{galaxyId}`

## Path parameters

- `galaxyId` union, required
  - string
  - string, uuid

## Request body

- object
  - `Galaxy` object
    - `default` boolean — `true` to filter out galaxy clusters with `default=true` set.
    - `custom` boolean — `true` to filter out galaxy clusters with `default=false` set
    - `distribution` '0' | '1' | '2' | '3' | '4' | '5' — Who will be able to see this event once it becomes published and eventually when it becomes pulled: * `0` - Your organization only * `1` - This community only * `2` - Connected communities * `3` - All communities * `4` - Sharing group * `5` - Inherit Event
    - `format` 'default' | 'misp-galaxy' — If set to `misp-galaxy` result set is in the misp-galaxy format.
    - `download` boolean — `true` returns the response as a json file attachment, `false` returns the response in the response body.

## Response `200`

Export galaxy clusters response

- union
  - GalaxyCluster[]
    - `id` string
    - `uuid` string, uuid
    - `collection_uuid` string, uuid
    - `type` string
    - `value` string
    - `tag_name` string
    - `description` string
    - `galaxy_id` string
    - `source` string
    - `authors` string[]
    - `version` string, nullable
    - `distribution` '0' | '1' | '2' | '3' | '4' | '5' — Who will be able to see this event once it becomes published and eventually when it becomes pulled: * `0` - Your organization only * `1` - This community only * `2` - Connected communities * `3` - All communities * `4` - Sharing group * `5` - Inherit Event
    - `sharing_group_id` string, nullable
    - `org_id` string
    - `orgc_id` string
    - `default` boolean
    - `locked` boolean
    - `extends_uuid` string, nullable
    - `extends_version` string, nullable
    - `published` boolean
    - `deleted` boolean
    - `GalaxyElement` GalaxyElement[]
      - `id` string
      - `galaxy_cluster_id` string
      - `key` string
      - `value` string
  - GalaxyMispFormat — Galaxy and clusters representation in misp-galaxy format.
    - `name` string
    - `type` string
    - `authors` string[]
    - `version` union
      - boolean
      - string, nullable
    - `uuid` string, uuid
    - `source` string
    - `values` object[]
      - `description` string
      - `uuid` string, uuid
      - `value` string
      - `extends_uuid` string, nullable
      - `extends_Version` string, nullable
      - `meta` object — Each Galaxy element associated to this cluster represents a key-value property.

## Other responses

- `403` — Authentication failed. Please make sure you pass the API key of an API enabled user along in the Authorization header.
- `404` — The specified resource was not found
- `default` — Unexpected API error

## Changes

- **2024-07-11** `7cd8b1880b11` — 5 breaking, 8 info
  - request property `Galaxy/distribution` was restricted to a list of enum values
  - removed `#/components/schemas/DistributionLevelId, subschema #2` from the `Galaxy/distribution` request property `oneOf` list
  - the `Galaxy/distribution` request property type changed from no type to `string`
  - the response property `oneOf[subschema #1]/items/allOf[#/components/schemas/GalaxyClusterNoId]/sharing_group_id` became nullable for the status `200`
  - …9 more

[Change history](https://skmtc.dev/misp/apis/misp-automation-api/changes/galaxies/export/:galaxyId/post.md)

---

[API](https://skmtc.dev/misp/apis/misp-automation-api.md) · [All operations](https://skmtc.dev/misp/apis/misp-automation-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/misp/misp-automation-api/revisions/00c36cd68bb5/schema)