Skip to main content
nsoni
Staff
Staff
March 2, 2025

Troubleshooting Tip: Manual malware IOC import using csv file failed with error 'Row 1, Column 2: Expected String format, Field is missing'

  • March 2, 2025
  • 0 replies
  • 654 views
Description The article provides steps to fix the csv file format to prevent malware IOC import failure while using a csv file.
Scope FortiSIEM.
Solution

 

malware_url_import_error.png

 

The import failed error indicates that format of the CSV file contents is incorrect.

 

CSV import failed due to missing comma separators. Each row in the CSV file must contain the required number of columns, even if some columns are blank.

 

For example, when importing URLs, the CSV file must contain five columns: URL, malware type, confidence, description, and last seen (mm/dd/yyyy)

Therefore, each row should have four commas, even if the columns other than the URL are blank.

 

Incorrect CSV file:


https://abc.local/unPek2 
https://xyz.local/setup_wm.exe 

 

Correct CSV file:

 

https://abc.local/unPek2,,,,
https://xyz.local/setup_wm.exe,,,,

 

Refer to the guides below to understand the fields required in a csv file for the respective malware IOC types.