2021-11-09 01:49 PM
Hi community,
We are currently working with a customer who needs to integrate into Netwitness the results of some reports generated by a database auditing tool. These reports are files in CSV format. Within these reports, we have different columns and each of the values within the CSV is correctly enclosed in quotation marks.
Unfortunately, as these are database audit reports, we have that some cell values are queries made and these queries contain commas and line returns. As the query is within the quotes, the RFC of the CSV is valid, but when I want to perform the TypeSpec for the collection of the file using File Method, Netwitness takes each of the lines as a totally different event.
Anyone have any idea how I can fix this behavior?
here a little example of the csv
"value 1","value 2", "SELECT * FROM TABLE", "value 3"
"value A", "value B", "SELECT *
FROM TABLE", "VALUE C"
Regards,
Max