OpenCTI-Platform
Formatting export CSV feeds
Description
We have noticed that out analysts sometime use advanced formatting in entity description field. In that case, the export csv file may contains double CRLF sequence, which causes problems with correctly parsing data lines. The solution would be to use quotation marks in export feed, but I haven’t found such an option in feed configuration pane. Is this option somehow available?
Environment
1.On prem 6.8.14
Actual Output
Issue in file due to the carriage returns / line feeds
Additional information
csv file provided with 'sep=;' added for the first line so you can visualise the issue when loading into Excel (as semi colon is used in this file and Excel defaults to a comma).
In the file you can find pasted output from feed. It’s test feed created to replay the issue, but we have the same effect in production export feed. It is only one indicator in output. The line is split in the middle of description column and our data parser claim error during data validation.
Note: File also contains commas in the description, hence why semi colon
