Import File Issues

If your import file is not formatted correctly, or is missing required information, an error is displayed, and the file is not imported.

Check the following:

  • If you are adding unknown sources, each line in the file must contain a combination of the required attributes:
    • IP or IPv6 or Hostname, and
    • Event Source Type
  • The first line of the file must contain header names, and the names must match the names in NetWitness. To get a list of correct column names, you can export a single event source. Examine the exported CSV file: the first row of the file contains the correct set of attribute/column names.