Do the filter and export options explained in Manage dashboards not work for you?

Unfortunately, you can't switch the Google SecOps UI back to the old Chronicle view.

Once a platform like SecOps undergoes a major UI and branding update, the old version is permanently deprecated. I understand this can be frustrating when you're used to a specific workflow, especially for exporting data.

However, you can solve the JSON export issue by being more specific in the columns you select.

## Solving the JSON Export Problem ✅

The reason your exported values are in JSON format is that you are likely selecting a "parent" UDM field instead of the specific "child" field you need. The new UI exports the entire object for that parent field.

The solution is to select the specific, fully-qualified UDM field path.

Example: Let's say you want to export the principal hostname.

• Incorrect Column Selection: If you select the parent field principal in the Column Manager.

• Resulting Export: Your CSV will have a column named principal, and the value in each cell will be a JSON object like: {"asset_id":"-","hostname":"win-dc-01","ip":["10.1.1.1"],"location":{"country_or_region":"-"},"user":{"userid":"-","windows_sid":"-"}}

• Correct Column Selection: Use the search bar in the Column Manager to find and select the specific child field principal.hostname.

• Resulting Export: Your CSV will have a column named principal.hostname, and the value will be a simple string, as you want: win-dc-01

## Tips for Using the New Column Manager 💡

While you can't go back, here are a few tips that might make the new UI easier to work with:

1. Heavily Use the Search Bar: The UDM has thousands of possible fields. Don't scroll—always use the search bar at the top of the Column Manager to quickly find the exact field you need (e.g., search for "file path," "sha256," or "ip").

2. Add Columns Directly from Events: When you are viewing the details of a specific event, you can hover over any field and click the "Add as Column" icon. This is often faster than opening the full Column Manager.

3. Save Your Column Views: Once you have the columns set up exactly how you like them for a specific task, save the search. This will also save your column configuration, so you don't have to rebuild it every time.

## Providing Feedback to Google

Since the old UI is not coming back, the best course of action is to provide feedback to the Google SecOps product team. Use the "Send Feedback" button (usually under the help icon) in the UI to explain the difficulties you're having with the export workflow. They use this feedback to prioritize future improvements.