Run ReportsContinuous Data Exports
Continuous Data Exports
Continuously export assets, vulnerabilities, and scan results from Mondoo to cloud storage or a data warehouse.
Mondoo can continuously export your security data (assets, vulnerabilities, scan results, and check results) to the storage or warehouse of your choice. Once configured, exports run automatically about every 24 hours, keeping your downstream systems current without manual effort.
Common reasons to set up a continuous export:
- Custom dashboards and reports. Combine Mondoo data with other business data in Tableau, Power BI, Looker, or similar tools.
- Long-term retention. Keep historical data beyond Mondoo's built-in retention window for trend analysis or audit evidence.
- Security data lake. Correlate Mondoo findings with telemetry from other security and operational tools.
How exports work
You create an export integration on a Mondoo space. Each integration sends data from a single space to a single destination. From that point on:
- Mondoo writes a full snapshot of the space's current data on every run.
- Exports run about every 24 hours on Mondoo's schedule. You can also trigger an export at any time with SCHEDULE NOW on the integration detail page.
- Data is written as JSONL or CSV (selectable on most destinations). See the JSONL schema reference for the field-level structure.
Removing an integration stops future exports but does not delete data already written to your destination.
Choose a destination
| Destination | Format | When to use |
|---|---|---|
| Amazon S3 | JSONL or CSV | Long-term retention or AWS-based data pipeline |
| Microsoft Azure Blob Storage | JSONL or CSV | Azure-based data pipeline |
| Google Cloud Storage | JSONL or CSV | GCP-based data pipeline |
| Google BigQuery | Native tables | SQL queries and dashboards over your security data |
| Snowflake | Native tables | SQL queries in an existing Snowflake warehouse |
| PostgreSQL | Native tables | App or report backed by PostgreSQL |
| S3-compatible service | JSONL or CSV | MinIO, Ceph, or another self-hosted object store |