AlienVault® USM Anywhere™

Importing Assets from a CSV File

Role Availability Read-Only Analyst   Manager

USM Anywhere enables you to import several assetsAn IP-addressable host, including but not limited to network devices, virtual servers, and physical servers. from a CSV file. Use this option to add assets in large quantities to your environment from a single file. Keep in mind that this file needs to follow a specific format.

Warning: If the file does not follow the specific format, the assets will not be imported. See About the CSV File for more information.

To import assets from a CSV file

  1. Go to Environment > Assets.
  2. Click Actions > Import Assets to open the Import Assets dialog box.
  3. Import Assets dialog box

    Note: If there is an asset inside the CSV file that has the same IP address or fully qualified domain name (FQDN) of an asset that already exists in your environment, or if there are any fields that are not valid, the new asset is not added.

  4. Drop your file or select the file from your desktop.

    Once you select a file, the name of the file displays and the Import button is active.

  5. If you have more than one sensor configured in your environment, you need to select a sensor.
  6. Click Import and the process starts. You can see the status of the process, how many assets have been processed or are pending, or which assets were not imported. In the About the CSV File section, there is a table where you can see the import errors and the reasons for which an asset has not been imported.

Note: When an import process starts and finishes, USM Anywhere generates system events. See Searching for System Events Related to an Asset Import Process for more information.

About the CSV File

The CSV file must have this format:

Asset Name;Description;Asset Type;PCI;HIPAA;IP Address,FQDN

You can use "IP Address,FQDN" as many times as needed. If you need to skip a field, put two semicolons together leaving no space. For example:

test1;this is a test asset;;true;true;1.1.1.1

test2;this is a test asset;;true;false;2.2.2.2

test3;this is a test asset;;false;false;3.3.3.3

Important: Do not include a header line in the CSV file because it will result in an error of invalid format.

You need to provide an IP address or FQDN value valid for USM Anywhere.

Examples of IP addresses and FQDNs
Example Valid / Invalid
1.1.1.1 Valid
,my.domain.com Valid

1.1.1.1, my.domain.com

Valid
my.domain.com Invalid

Please note the following:

  • There must be only one asset per row.
  • You can import all the files you need, but only one at a time.
  • The maximum number of network adapters per asset is limited to 30.
  • The maximum number of lines in the CSV file is 200,000.
  • The maximum size of the CSV file is 25 MB.

Searching for System Events Related to an Asset Import Process

USM Anywhere generates system events when an import process starts and finishes.

To look for system events related to an import process

  1. Go to Settings > System Events.
  2. Locate the Event Name filter.
  3. Selecting an Event Name filter

  4. Select one of these filters:
    • Asset Import Process Finished: This option displays the system events generated when the assets import process from a CSV file finishes.
    • Asset Import Process Started: This option displays the system events generated when the assets import process from a CSV file starts.

    The result of your search displays.