---
title: "Create"
method: POST
path: "/api/v1/systemlog/exports"
tags: ["System Log Exporter"]
---

# Create

`POST /api/v1/systemlog/exports`

Create a system log export.

## Request body

- C1ApiSystemlogV1ExportServiceCreateRequest — The ExportServiceCreateRequest message is used to create a new system log exporter. This message contains a oneof named export_to. Only a single field of the following list may be set at a time: - datasource
  - `datasource` C1ApiSystemlogV1ExportToDatasource, nullable — The ExportToDatasource message.
    - `datasourceId` string — The datasourceId field.
    - `format` 'EXPORT_FORMAT_UNSPECIFIED' | 'EXPORT_FORMAT_OCSF_JSON_ZSTD' | 'EXPORT_FORMAT_OCSF_JSON_GZIP' — The format field.
    - `prefix` string — The prefix field.
  - `displayName` string — The display name of the new system log exporter.

## Response `200`

Successful response

- C1ApiSystemlogV1ExportServiceCreateResponse — The ExportServiceCreateResponse message.
  - `exporter` C1ApiSystemlogV1Exporter — The Exporter message. This message contains a oneof named export_to. Only a single field of the following list may be set at a time: - datasource
    - `createdAt` string, date-time
    - `datasource` C1ApiSystemlogV1ExportToDatasource, nullable — The ExportToDatasource message.
      - `datasourceId` string — The datasourceId field.
      - `format` 'EXPORT_FORMAT_UNSPECIFIED' | 'EXPORT_FORMAT_OCSF_JSON_ZSTD' | 'EXPORT_FORMAT_OCSF_JSON_GZIP' — The format field.
      - `prefix` string — The prefix field.
    - `deletedAt` string, date-time
    - `displayName` string — The displayName field.
    - `exportId` string — The exportId field.
    - `state` 'EXPORT_STATE_UNSPECIFIED' | 'EXPORT_STATE_EXPORTING' | 'EXPORT_STATE_WAITING' | 'EXPORT_STATE_ERROR' — The state field.
    - `updatedAt` string, date-time
    - `watermarkEventId` string — we've synchorized this far

---

[API](https://skmtc.net/conductorone/apis/c1-api.md) · [All operations](https://skmtc.net/conductorone/apis/c1-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/conductorone/c1-api/revisions/d391405a35d3/schema)