IBM Support

QRadar: CSV file fails to import into a reference data set with the error message: An unknown upload error has occurred. Please try again

Troubleshooting


Problem

A Microsoft Excel™ created csv file fails to import into a reference data set with the error message:  'An unknown upload error has occurred. Please try again.'

Cause

Files saved in Microsoft Excel™ as CSV UTF-8 (Comma delimited)(*.csv) use the mime_encoding of utf-8 format for the file, which cannot import into QRadar as a reference data set.

Resolving The Problem

Administrators who experience this issue can “save as” the file again in Microsoft Excel as CSV (Comma delimited)(*.csv). When saved as file type (Comma delimited)(*.csv), the mime_encoding for the file is us-ascii format, which does import into QRadar Reference data sets.

  1. Open the file in Microsoft Excel™.
  2. In Microsoft Excel, go to file, and click Save As.
  3. Type in a new name or keep the same name and overwrite the existing file.
  4. Choose the second CSV type in the list: CSV (Comma delimited)(*.csv).
    Save As options
  5. Save the file.
  6. In QRadar GUI, go to the admin tab.
  7. Click reference set management.
  8. Create a Reference Set or select one listed.
  9. Double-click to open the Reference set editor.
  10. Click Import and choose the new csv file to import.
  11. Click Import.

    Results
    The new file saved as type (Comma delimited)(*.csv) imports without errors.

Document Location

Worldwide

[{"Type":"MASTER","Line of Business":{"code":"LOB24","label":"Security Software"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSV4BL","label":"IBM QRadar"},"ARM Category":[{"code":"a8m0z000000cwsyAAA","label":"Admin Tasks"}],"ARM Case Number":"TS012631587","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Versions"},{"Type":"MASTER","Line of Business":{"code":"LOB24","label":"Security Software"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSBQAC","label":"IBM Security QRadar SIEM"},"ARM Category":[{"code":"a8m0z000000cwtiAAA","label":"Performance"}],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Versions"}]

Document Information

Modified date:
03 July 2023

UID

ibm17005009

Page Feedback