> This page is for Applications Protection.

> For clean Markdown of any page, append .md to the page URL.
> For a complete documentation index, see https://docs.humansecurity.com/llms.txt.

# Data Export actions

**Data Export actions** let you automatically export data whenever Sightline detects an attack that matches the policy rule you add it to.

You can learn how to create data export actions with this article.

> **Note**
>
> These actions only support [acccount-related events](/applications/about-the-accounts-overview-dashboard).

## Prerequisites

* Appropriate [**role permissions**](/applications/role-permissions#sightline-cyberfraud-defense) to add and manage actions. By default, this is an **Admin** in Sightline.
* An integration with a supported data export integration. See [our integrations](/applications/data-export-integrations) for more information.
* If you want to send custom data, you need existing **custom parameters** first. See [Set custom parameters](/applications/set-custom-parameters) for more information.

## Create a data export action

1. Navigate to **Sightline Cyberfraud Defense > Settings > Mitigation > Custom Action Settings.**
2. Under the **Data Export** section, click the **integration** you want to create an action for.
3. Click **+ Add Action.**
4. Complete the following fields:
   * **Action name:** The name of the action and how it will appear in your HUMAN account.
   * **Integration:** Select the integration you want to use for data export.
   * **Application data source:** The application you want to send data from. You can only select one application per data export action.
   * **Event type:** The type of event you want to send data about.
   * **Content Settings:** Select each field you want to include in the request. You can't change any **default** fields.
5. Click **Save changes.**

Your data export action has been created. Next, be sure to [add it to a policy rule.](#add-a-data-export-action-to-a-policy-rule)

## Add a data export action to a policy rule

Once you have a data export action, we recommend adding it to a [**policy rule**](/applications/create-account-policy-rules).

> **Note**
>
> Be sure your policy rule’s **application** and **event type** match the ones you chose above. Otherwise, the action won’t appear when you try to add it to the rule.

1. Navigate to **Sightline Cyberfraud Defense > Policies > Account Policies.**
2. Select a rule to edit or create a new rule. See [our article](/applications/create-account-policy-rules) for more on creating policy rules.
3. From the **Actions** menu, click and drag **Data Export** to the **THEN** field.

![](/_fern-img/e38c519626fbac21710b1c38bc9e18d6f66faae37d8a43795b46b5833ec5fba4.webp)

4. Finish any other changes to your policy rule, then click **Simulate** rule.
5. Click **Save changes.**

Now, whenever Sightline detects an attack that matches the conditions in that policy rule, it will send a data request about that attack to your chosen integration.