IBM QRadar

IBM QRadar

Join this online topic group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.


#Security
#QRadar
#SecuringhybridcloudandAI
 View Only
  • 1.  Populating all the fields while importing assets from CSV file

    Posted 07/17/20 04:35 PM

    I am working on a new deployment for a client and they want to add about 2000 assets. I can import the assets from a CSV file but it is only allowing me to populate ip,name,weight and description. I Want to add more fields to be populated while importing the CSV file. Is there a way to do it?



    #QRadar
    #Support
    #SupportMigration


  • 2.  RE: Populating all the fields while importing assets from CSV file

    Posted 07/20/20 02:22 PM

    I don't know what QRadar version you are on, but this answer is version dependent.


    In QRadar 7.3.3 (and earlier), there are two options.

    1. You can use the API in QRadar to import assets /asset_model/assets/{asset_id}.
    2. There is a utility called asset_updater.py that you might also be able to use to import values from a CSV file. https://github.com/ibm-security-intelligence/data-import/tree/master/assets


    In QRadar 7.4.x, there is only the API option to update assets. I've heard that the utility does not work with QRadar 7.4.x. So, the API is going to be your best bet. You will need to know the asset IDs, then you can post the values in through the API.



    #QRadar
    #Support
    #SupportMigration


  • 3.  RE: Populating all the fields while importing assets from CSV file

    Posted 07/21/20 04:49 PM

    Thanks for pointing to the utility, I had to tailor it a bit but it worked fine in the end. I am not that good with piece of codes but someone actually made the required changes and posted it on another forum. And your comments there with regard to the API version helped me too in tailoring the script. I have tested it on Qradar version 7.4.0 Fixpack 4 and it is doing the job for me. Otherwise, doing it using the api would have been a nightmare for a person like me who does not have any idea about scripting. Once again thank you for the help.



    #QRadar
    #Support
    #SupportMigration


  • 4.  RE: Populating all the fields while importing assets from CSV file

    Posted 01/03/22 05:24 PM

    I am looking to automate importing of assets. ​Can you please share the code or point to the forum you got the code from please.



    #QRadar
    #Support
    #SupportMigration


  • 5.  RE: Populating all the fields while importing assets from CSV file