During the Extraction from the Investigation view the web page throws the following error:

SA error "TransportException: 28800 second timeout reached waiting for server response"

Increase the timeout to run an user's query 
Go to:

Administration -> Security -> Users -> Select the user -> Edit Button on the top -> Attributes -> SA Core Query Timeout 
Administration -> Security -> Roles -> Select the role  -> Edit Button on the top -> Attributes -> SA Core Query Timeout 
Services -> Concentrator-> Security -> Users -> Select the User -> SA Core Query Timeout edit and Apply from the bottom
Services -> Decodel/LogDecodeR -> Security -> Users -> Select the User -> SA Core Query Timeout edit and Apply from the bottom
Services -> Broker -> Security -> Users -> Select the User -> SA Core Query Timeout edit and Apply from the bottom



If this steps doesn't help for the extraction follow this KB article 000029676 to extract big amount of data.