Assets CSV File Format

Assets represent individual nodes on the network, such as servers and routers. For more information, see The Network Model.

You can define a set of assets in ESM by batch loading asset definitions from an Assets CSV file. Asset CSV files contain the columns listed in the table, below.

When an assets CSV file is selected for import, by default only the first fifteen rows of data are displayed in Select Column Headers for the Asset Data panel. However, when the data is imported into the ArcSight Manager, all the rows are imported. For more information, see Increasing the Number of Displayed Rows.

For the wizard to determine how to process the imported data, the type of each column must be specified. For more information, see Specifying CSV Column Types.

When the Next button is clicked in the Summary of Data to Import panel, the asset data is imported into the ArcSight Manager. The new assets are created in the /All Assets/Site Assets group. For example, if an asset called DMZCorpEmailServer was specified in the imported assets CSV file, a new asset is created at the following URI: /All Assets/Site Assets/DMZCorpEmailServer. When imported, the new assets are auto-zoned. For more information, see Auto-Zoning Imported Assets.

Assets CSV File Columns

Column Type

Description

Required Column?

Repeatable Column?

Example Value

Name

A descriptive name for the asset. This name must be unique. It is recommended to specify a name. However, if a name is not specified, a unique name is generated using the other fields.

No

No

DMZ Corp Email Server 1

Host Name

The host name of the network device represented by the asset.

No

No

dmz_corp_eml1

IP Address

The IP address of the network device represented by the asset.

NOTE: If no value is specified for this column (,,) the asset is created with an IP address of 0.0.0.0.

Yes

No

192.0.2.0

MAC Address

The MAC address of the network device represented by the asset. The MAC address is made up of six groups of two hexadecimal digits can be separated by colons (:) or hyphens (-).

No

No

00-00-5E-00-53-00

Static Addressing

Defines if the network device is statically addressed even though the IP address of the asset is in a dynamic zone:

  • true—asset uses static IP addressing

  • false—device uses dynamic addressing (DHCP)

For more information, see Static Addressing in a Dynamic Zone.

No

Default is false

No

false

Category URI

The asset category to assign to network device.

NOTE: The wizard does not create new categories. For the category to be assigned, it must already exist.

No

Yes

This column can be repeated because a network device can be categorized into more than one asset category.

/All Asset Categories/Site Asset Categories/Business Impact Analysis/Network Domains/Email/

Ignore

The column contains data that is not used by the Network Model wizard when creating assets. For example, this column could contain a description of the asset.

No

Yes

This asset defines the Corporate Email Server in the DMZ.