Bug ID 613245: Alert Transform Rule import with CSV files larger than 8MB fails

Last Modified: Oct 01, 2018

Bug Tracker

Affected Product:  See more info
BIG-IQ Fraud Protection Service (FPS)(all modules)

Known Affected Versions:
5.0.0, 5.0.0 HF1

Fixed In:
5.2.0

Opened: Aug 29, 2016
Severity: 4-Minor

Symptoms

Import of large CSV file fails.

Impact

User can not apply signatures, typically exported from SOC.

Conditions

Only when files are larger than about 8 MB

Workaround

- Split the CSV file into multiple files less than 8MB. - Ensure split happens along line boundary, so, complete lines are in files. - Ensure CSV header (first line from original file) gets copied to each subsequent split file. That way each CSV file has its own header. - Upload these smaller CSV file individually

Fix Information

FPS Alert Transform Rule CSV files up to 32MB in size are now supported.

Behavior Change