Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Cagri
Explorer

I can't add csv file to mgmt-cli tool

I have a CSV file with MD5 hashes. I want to upload this CSV file with the help of the mgmt_cli tool.

this is cli wrote;

mgmt_cli add-threat-indicator name my_indicator_1 observa bles-raw-data /home/admin/md5.csv

this is error message;

[Expert@xc-cp-mgmt:0]# mgmt_cli add-threat-indicator name my_indicator_1 observa bles-raw-data /home/admin/md5.csv
Username: admin
Password:


---------------------------------------------
Time: [12:08:12] 2/11/2020
---------------------------------------------
"Add Indicator" in progress (20%)


---------------------------------------------
Time: [12:08:22] 2/11/2020
---------------------------------------------
"Add Indicator" failed (100%)
tasks:
- uid: "3b5e0b45-d63d-4dc0-a7aa-b03b7710984e"
type: "task"
domain:
uid: "41e821a0-3720-11e3-aa6e-0800200c9fde"
name: "SMC User"
domain-type: "domain"
task-id: "5409932c-d0ff-4c3a-bdff-d96573eba98b"
task-name: "Add Indicator"
status: "failed"
progress-percentage: 100
start-time:
posix: 1604308091084
iso-8601: "2020-11-02T12:08+0300"
last-update-time:
posix: 1604308091084
iso-8601: "2020-11-02T12:08+0300"
suppressed: false
task-details:
- request-status: "failed"
request-status-description: "status element returned error: - Indicator in r ow 1 has less fields than expected\n"
comments: "status element returned error: - Indicator in row 1 has less fields than expected\n"
color: "black"
icon: "General/globalsNa"
tags: []
meta-info:
lock: "unlocked"
validation-state: "ok"
last-modify-time:
posix: 1604308092333
iso-8601: "2020-11-02T12:08+0300"
last-modifier: "admin"
creation-time:
posix: 1604308091092
iso-8601: "2020-11-02T12:08+0300"
creator: "admin"
read-only: false

Executed command failed. Changes are discarded.

 

 

this is CSV file;

[Expert@xc-cp-mgmt:0]# cat MD5.csv
Name,Value,Type,Confidence,Severity,Product,Comments
deneme1,166ED84E38FA294D489D791B211685AB,MD5,medium,low,AB,deneme
deneme2,293DE194F503BC734A801FA49D948B32,MD5,medium,low,AB,deneme
deneme3,17DB2B5A95D6DBB6CDDBA2342F8474D1,MD5,medium,low,AB,deneme
deneme4,EF9A98671CC89AE67F9A7FCD07F622D7,MD5,medium,low,AB,deneme
deneme5,01867DE7BEB1CDBFC3D9900B7CED23CF,MD5,medium,low,AB,deneme

 

 

0 Kudos
3 Replies
PhoneBoy
Admin
Admin

0 Kudos
Cagri
Explorer

I have another question;

I have 12000 md5 hash file and this file is always updated. I want these hash files sent to the management server. How can these processes?

0 Kudos
PhoneBoy
Admin
Admin

You can script the same command above as well as a policy install for it to take effect. 

0 Kudos