Importing multiple devices from a CSV file

Use Device Import to add a list of adapters and their network IP addresses to the Configuration Monitor in QRadar Risk Manager. You can easily import a principal device list or a bulk upload to Configuration Monitor by using a CSV file.

About this task

If you import a list of devices and then alter an IP address in the CSV file, then you might accidentally duplicate a device in the Configuration Monitor list. Delete a device from Configuration Monitor before you reimport your principal device list.

Procedure

  1. Click the Admin tab.
  2. Click Apps, and in the Apps section, click Device Import.
  3. Click Browse.
  4. Locate your CSV file and click Open.
    The device import list can contain up to 5000 devices, but the list must contain one line for each adapter and its associated IP address in the import file.
    For example,
    <Adapter::Name 1>,<IP Address>
    <Adapter::Name 2>,<IP Address>
    <Adapter::Name 3>,<IP Address>

    where:

    <Adapter::Name> contains the manufacturer and device name, such as Cisco::IOS.

    <IP Address> contains the IP address of the device, such as 191.168.1.1.

    Here's an example of a CSV file that lists the devices to import into the Configuration Monitor in QRadar Risk Manager:

    Cisco::SecurityAppliance,10.225.80.1
    Cisco::SecurityAppliance,10.225.78.3
    CheckPoint::SecurePlatform,10.225.80.5
    PaloAlto::PANOS,172.16.54.1
    Sourcefire::3D,172.16.16.1
  5. Click Import Devices.

Results

If an error occurs, review your CSV file to correct the errors, and then reimport the file. If the device list is structured incorrectly, or if the device list contains incorrect information, an import of the CSV file might fail. For example, your CSV file might be missing colons or a command, multiple devices might be on a single line, or an adapter name might have a typographical error.

If the device import fails, then no devices from the CSV file are added to Configuration Monitor.