Changelog · Oct 21, 2026 — A new IP page with IP history, Monocle Health Alerts, AI traffic in Explorer, and edge access tokens.

Assessment Exports

Assessment Exports gives you a file of every Monocle assessment for an application over a date range, one assessment per record. Use it for fraud investigations, compliance checks, risk decisions, or loading Monocle data into your own analytics or data pipeline.

Exports run in the background. When yours is ready, you get an email and can download it from the Spur app.

Assessment Exports requires the Pro plan or above. On other plans, the Assessment Exports tab doesn't appear in your application, and opening the page directly shows an Upgrade plan prompt.

Create an export

1. In the Monocle dashboard, open your application and go to Assessment Exports.
2. Select New Export. The Create Assessment Export dialog opens.
3. Fill in the export's scope:
   • Export name (optional), such as Q4 fraud investigation, up to 200 characters
   • Description (optional), up to 500 characters
   • Date range: Last 7 Days, Last 30 Days, Last 60 Days, Last 90 Days, or a custom range. Days run midnight to midnight UTC, and the range includes both the first and last day, so Last 7 Days covers 8 calendar days, including the part of today that has passed when the export runs. The end date must be after the start date, so the shortest export covers two days.
   • Traffic types: turn on the traffic to include, or leave them all off to include all traffic
4. Select Queue export.

An export can contain up to 500 million assessments. A larger one fails, so narrow the date range or traffic types.

Traffic types

If you turn on more than one, the export includes assessments that match any of them.

Track your exports

Your exports are listed in a table:

Large exports can take a while, and you don't need to keep the page open. The person who created the export usually gets an email when it's complete, or if it fails. If a run is interrupted and marked failed, no email is sent, so check the Status column. A re-run emails whoever selected Re-run, not the original creator.

Download, clone, re-run and delete

Open an export's actions menu (⋯):

Files expire 90 days after the export is created. After that, Download is unavailable. Clone the export to create a new file.

Each time you select Download, the app creates a fresh download link that's valid for 15 minutes.

File format

An export is a gzip-compressed file of newline-delimited JSON (.ndjson.gz). Each line is one assessment. Here's one record, formatted for reading:

{
  "id": "…",
  "ts": "2026-09-30T14:02:11Z",
  "sid": "…",
  "ip": "203.0.113.24",
  "cc": "US",
  "vpn": true,
  "proxied": false,
  "anon": true,
  "rdp": false,
  "dch": false,
  "ai_agentic": false,
  "ai_crawling": false,
  "ai_operator": "",
  "complete": true,
  "service": "PROTON_VPN",
  "cpd": ""
}

To read it:

gunzip -c export.ndjson.gz | head -3
gunzip -c export.ndjson.gz | jq -r 'select(.anon) | .ip' | sort -u

Related

• Assessment: the assessment object and its fields
• Explorer: investigate traffic in the app before exporting