ESM: Import File Issues

Document created by RSA Information Design and Development on Sep 6, 2017Last modified by RSA Information Design and Development on Oct 4, 2017
Version 8Show Document
  • View in full screen mode
  

If your import file is not formatted correctly, or is missing required information, an error is displayed, and the file is not imported.

Check the following:

  • If you are adding unknown sources, each line in the file must contain a combination of the required attributes:
    • IP or IPv6 or Hostname, and
    • Event Source Type
  • The first line of the file must contain header names, and the names must match the names in NetWitness Suite. To get a list of correct column names, you can export a single event source. Examine the exported CSV file: the first row of the file contains the correct set of attribute/column names.
You are here
Table of Contents > ESM: Troubleshooting > ESM: Import File Issues

Attachments

    Outcomes