How to manage collect CSV Files
In this page we describe how to collect events from a CSV file.
You must be logged in to the CyberQuest web interface with a user with administrative rights.
Navigate to "Settings > Management > Data Source Manager".
This page contains all the data sources added in the Cyberquest application.
Press the "Add data-source" button and complete de following form:
DataSource Type: Select "Applications/Generic CSV files" data source;
DataSource Information: This field is filled in automatically with data source information;
Query Interval: At what time interval is the WMI query executed. It is automatically completed to run every 60 seconds;
Credentials to use: Add appropriate credentials from a drop-down list;
Tag: This field is filled in automatically, but you can change the information;
Administrative Notes: You can complete with information about the added data source;
Annonymize Fields: You can select certain information to be anonymized;
Monitored folder: The path to the folder;
File Mask: File mask;
File Buffer Size: File buffer size;
File Quote: File quote;
File Delimiter: File delimiter;
File Escape Char: File escape char;
File Comment Start With: File comment start with;
File Has Headers: File has headers;
File File Encoding: File encoding;
File Date Time Format: File date and time format. The date can appear in the document together with the time;
File Date Time Column: File date and time column order;
File Time Column: File time column order;
File Time Format: File time format;
File Date Column: File date column order;
File Date Format: File date format;
Field Mapper: The data extracted from the a CSV file is placed in the fields in the Cyberquest application. We can add other fields besides the ones already created using the "New" button
Click the "Save" button to save the data source.
The next step is to assign the Cyberquest agent to this data source. Press the drop-down list and choose the agent.
To edit the data sources information, press "Edit" button. This process is almost identical to adding data sources.
You can also delete the data source by pressing "Delete" button.