In the Detect Incident tab, when the sysadmin clicking the "Export Incidents" button, there is no file download initiated, and no error message appears. The action simply does not have any effect.
The user is active sysadmin in multiple CloudSOC tenants, and when trying to export the Detect incident, the task encouters an internal error.
The workaround is to use dedicated user that is active only in the current tenant to export the Detect Incident. The CloudSOC Engineering team is working on the fix and is intended to address this use case in the 3.186 release update.