The format should be:
Just place in in a text file and you should be good. Name can be anything you want.
The most commonly used enrichment is adding the full displayname to events where normally only the user ID is shown. Be aware though that using data enrichment can overwrite other values if you select a custom type field for enrichment that is already used in a specific event. Also, only string types (1-10) may be used for enrichtment. Random strings are not allowed (unfortunately).
I'm doing test in laboratory, but i cannot make it work maybe you can help me.
In ESM i have the following configuration.
Device and Rule
My Data Enrichment file in the FTP Server
And Finally, i upload manually an event
If i understand it should be another field "testdata" with the value "example".
Is there something that i am missing?