Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

EDR: "Report from 'feed_name' has non-string 'id' field"

EDR: "Report from 'feed_name' has non-string 'id' field"

Environment

  • EDR Server: 7.7.3 and below
  • Feeds

Symptoms

  • Custom feed is not importing and the following error is seen in the enterprise.log
    "Report from 'feed_name' has non-string 'id' field"

Cause

Report "id" field is an integer instead of a string

Resolution

  1. Update the feed report's id to be surrounded in quotes.
    "id": 70
    to
    "id": "70"
  2. Upgrade to 7.8.0. In this version, it will automatically convert these int's into strings. 

Additional Notes

  • 7.8.0 is scheduled to release at the end of March. 

Related Content


Labels (1)
Tags (2)
Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎01-23-2023
Views:
286
Contributors