Stellar Data Exporter
Stellar Data Exporter is a Web UI for querying Stellar Cyber raw data, previewing the result, and exporting it to browser download, S3-compatible object storage, or SFTP. It is useful when an analyst or engineer needs repeatable exports across multiple Stellar Cyber data sources without building a new API script for every request.What it provides
- Root Scope authentication with account email + All-Access Token
- User Scope authentication with a User API Key
- friendly multi-select data sources mapped internally to Stellar Cyber indices
- explicit start/end time selection
- Elasticsearch DSL and Stellar Cyber/Lucene query modes
- query preview before export
- CSV, JSON Array, and NDJSON output
- browser download, S3-compatible storage, and SFTP destinations
- field selection, record limits, gzip, and file splitting
- adaptive time slicing for large export windows
- progress, cancellation, persistent sanitized history, and supported retry/resume
- saved non-secret profiles and query history/favorites
- optional scheduled S3/SFTP exports
Normal workflow
Credential modes
Both credential types are exchanged for a short-lived Stellar Cyber access token before raw-data requests are sent.
User Scope API Key mode supports raw-data search and export. It is not treated as a preview-only or metadata-only mode.
Output destinations
Browser download
Export CSV, JSON, or NDJSON directly to the browser. Split browser exports can be delivered as a ZIP.
S3-compatible
Send output to AWS S3, Cloudflare R2, MinIO, or another supported S3-compatible endpoint.
SFTP
Send output over SFTP with password or SSH private-key authentication.
Basic vs Advanced
Basic mode keeps the normal workflow focused on data sources, time, query, output, and destination. Advanced mode exposes additional controls such as:- selected export fields
- record limit
- CSV delimiter/header/BOM behavior
- gzip compression
- maximum file size and split files
- adaptive slicing controls
- overlap policy
- remote destination details
- saved profiles, query history, export history, and scheduling controls
Security boundary
- interactive credentials are not written into persistent job history
- browser-saved profiles exclude credentials and destination secrets
- TLS verification is enabled by default
- the current application does not provide a multi-user isolation layer
- the development Uvicorn listener should not be exposed directly to the public Internet
User Guide
Follow the complete connection, query, preview, export, and troubleshooting workflow.
Source Repository
Review the implementation, tests, production runbook, and current release state.