Big news! The community will be moving to a new platform April 21. Read more.
Big news! The community will be moving to a new platform April 21. Read more.
Commodore Commodore
Commodore
2368 views

Map File(s) Fail

Jump to solution

We've installed and configured the Symantec Endpoint Protection DB smart connector.

We've also "Map'd an Additional Data Name", (Mappings for Symantec\Endpoint_Protection:GROUP_ID=>flexString1), which we've confirmed is working. This populates the string "9C39DE190AC40F1C009D3F5ACBB02B19" in the field flexString1.

However, we're also trying to add two map files to D:\ArcSightSmartConnectors\NADTC3-CONW007-SEP1\current\user\agent\map:

map.0.properties:

set.event.customerURI

/All Customers/CompanyName

map.1.properties:

!Flags,Overwrite

event.flexString1,set.event.customerURI

9C39DE190AC40F1C009D3F5ACBB02B19,/All Customers/CompanyName - Division

Even-though we've tried numerous combinations in the map file(s), we have been unable to have the value in flexString1, 9C39DE190AC40F1C009D3F5ACBB02B19,  map to "/All Customers/CompanyName - Division" and populate the value "/All Customers/CompanyName - Division" into the "customerURI" field whenever the string "9C39DE190AC40F1C009D3F5ACBB02B19" is encountered by the flexstring1 field..

The "map.0.properties" file is working and populating the value "/All Customers/CompanyName" in the field "customerURI". But the "map.1.properties" file is not working and is leaving the value "/All Customers/CompanyName" that was populated in the "customerURI" field by map.0.properties. So it appears that map.1.properties is being ignored.

Does anyone have any ideas on what we're doing wrong here?

Labels (2)
0 Likes
13 Replies
Commander
Commander

Hello Richard,

It worked. Thank You for the solution. Now other big challenge is we have to add many entries in map file aprroximate 2500+. The convenient way for us was to copy data from excel column to map.0.properties but this is not working. If we add entries manually then it works fine. Big challenge is to manually add these many entries. Is there any way you did it without any such issue.

Thanks in advance.

0 Likes
Commodore Commodore
Commodore

Hi Pratibha,

I'm glad the solution worked for you, in theory. We only had a few entities we needed to add manually. I would have to defer to the rest of this community for adding 2500+ entities. Perhaps Excel would work via csv format...but I am not sure on this.

0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.