It appears the documented feature Download as CSV (including raw logs) has been removed with recent UI changes.

raw is also not available as a column for CSV output.

is there a recommended way to download one or more of the raw log results from a UDM query in the SIEM UI?