Add Hosts From File

 Only Global Admins or Restricted Admins with elevated View and Manage privileges can take this action.

1. Create an .csv input file with the following standards:
   • A .csv spreadsheet: A comma separated values file with the columns in the order specified from left to right.
     
     • You must have a header row.
     • Do not use quotation marks around the input. 
     • Leave fields with no data blank.
     • Any strings must cleaned of preceding and following spaces.
   • A .csv text file. This is the same file type generated when you export the Entity Hosts grid to a file
     • The top line contains the headers in quotation marks and separated with commas.
     • The next line contains the values in quotation marks and separated with commas.
     • For fields with no data, include only the comma to indicate a skipped field.
     • Any strings must cleaned of preceding and following spaces.
       

       

2. Ensure your file has the following headers.
   
   • LogRhythm Host Name (required)
   • LogRhythm Entity
   • Short Description
   • Long Description
   • Risk Level: Integer between 0 (No Risk) and 9 (Highest Risk)
   • Threat Level: Integer between 0 (No Threat) and 9 (Highest Threat)
   • Zone: Internal, External, or DMZ
   • Windows (Netbios) Names
   • DNS Names
   • IP Addresses. You can specify as many IP addresses as you want.
     • In a .csv spreadsheet, they must begin at item 10 and each one must be in its own column.
     • In a .csv text file, they must be separated by commas, with no spaces, in a single set of quotation marks.
   • Location
   • Host OS
   • Host OS Version
   • Status
   • Last Updated
   • Host ID
3. On the main toolbar, click Deployment Manager.
4. Select the Entities tab.
5. Do one of the following:

   1. Select the Entity to which you want to import hosts if your file does not have the Entity specified for any or some of the records. If you leave the Entity value blank in the input file, it uses the Entity selected within the Entities tab.

   2. Select any entity.

6. Right-click the selection, and then click Add Hosts from File.
   The Host Import Manager appears.

7. Select the file for import.

8. From the Host Import Manager

   1. Review the records in the grid that were pasted.

   2. To accept or reject records, select the Action check box, click Action, and then click one of the following:

      1. Accept All. Accepts all hosts in the grid and creates or updates a record for each.

      2. Accept All New Hosts. Accepts all hosts that have a status of New Host and creates a record for each.

      3. Accepted Selected. Accepts all hosts that have the Action check box selected and creates or updates a record for each.

      4. Reject Selected. Rejects all hosts that have the Action check box selected. This removes them from the grid.

   3. If any records have a status value of Warning Type 4, choose the Warning Type 4 Acceptance Mode for that record and then accept as specified above. The following modes are available:

      • Enable Existing (default). If the host exists within the root or child entity already, enable it and leave it within the entity where it currently resides.
      • Enable Existing and Move to Specified Entity. If the host exists within the root or child entity already, enable it. If it doesn’t exist within the specified entity, move it to the specified entity.
      • Create New (not recommended). Create a new record regardless of whether it exists in the root or child entity (not recommended).