ESM: Import File Issues

Document created by RSA Information Design and Development on Sep 6, 2017Last modified by RSA Information Design and Development on Mar 2, 2018
Version 9Show Document
  • View in full screen mode

If your import file is not formatted correctly, or is missing required information, an error is displayed, and the file is not imported.

Check the following:

  • If you are adding unknown sources, each line in the file must contain a combination of the required attributes:
    • IP or IPv6 or Hostname, and
    • Event Source Type
  • The first line of the file must contain header names, and the names must match the names in NetWitness Suite. To get a list of correct column names, you can export a single event source. Examine the exported CSV file: the first row of the file contains the correct set of attribute/column names.
Previous Topic:Troubleshoot Feeds
You are here
Table of Contents > Troubleshooting > Import File Issues