cancel
Showing results for 
Search instead for 
Did you mean: 
wybae
Level 7

QQ : CSR report import error

Hi

Why is happend error?

CSR 2.1

Message was edited by: wybae on 6/16/14 9:35:33 PM CDT
0 Kudos
5 Replies
sroering
Level 13

Re: QQ : CSR report import error

The log parsing job will fail unless it has the correct header format.  Could you post a copy of the log header?

Required columns: "matd_server" "matd_taskid" "matd_hash" "filename""matd_background_scan"

Optional column: "matd_severity"


0 Kudos
wybae
Level 7

Re: QQ : CSR report import error

Hi~

thank you for your answer.

but it still fails.

Log header : time_stamp "auth_user" "src_ip" "url" "matd_severity" "matd_server" "matd_taskid" "matd_hash" "filename""matd_background_scan"

atd.png

atd1.png

Thanks.

Message was edited by: wybae on 6/17/14 11:46:07 PM CDT
0 Kudos
sroering
Level 13

Re: QQ : CSR report import error

Since the job is failing, CSR is complaining about the header.  It will fail the job unless it can parse the header.

So, if I look at what you copied and pasted, I see a missing space between "filename""matd_background_scan"

I don't see anything else wrong. The space is used as a field delimiter.

Also make sure the log lines match the header with all the correct spaces and quotes.  CSR will build a regex pattern for the log lines based on the header. If they don't match, the file won't parse correctly.

0 Kudos
sroering
Level 13

Re: QQ : CSR report import error

One correction. I've been told that "matd_severity" is not optional.  It needs to be included in the header too.


0 Kudos
wybae
Level 7

Re: QQ : CSR report import error

As you say, but it was still fails.

Please let me know whether you need a different setting.

Thanks.

0 Kudos