FortiSIEM
FortiSIEM provides Security Information and Event Management (SIEM) and User and Entity Behavior Analytics (UEBA)
nsoni
Staff
Staff
Article Id 379607
Description The article provides steps to fix the csv file format to prevent malware IOC import failure while using a csv file.
Scope FortiSIEM.
Solution

 

malware_url_import_error.png

 

The import failed error indicates that format of the CSV file contents is incorrect.

 

CSV import failed due to missing comma separators. Each row in the CSV file must contain the required number of columns, even if some columns are blank.

 

For example, when importing URLs, the CSV file must contain five columns: URL, malware type, confidence, description, and last seen (mm/dd/yyyy)

Therefore, each row should have four commas, even if the columns other than the URL are blank.

 

Incorrect CSV file:


https://abc.local/unPek2 
https://xyz.local/setup_wm.exe 

 

Correct CSV file:

 

https://abc.local/unPek2,,,,
https://xyz.local/setup_wm.exe,,,,

 

Refer to the guides below to understand the fields required in a csv file for the respective malware IOC types.

Contributors