05-05-2016 11:58 PM - edited 03-12-2019 06:00 AM
Sourcefire firesight rule update unable to install.
Error message:
Import failed: Invalid rule syntax found in file. Verify your rule syntax is correct and that your upload is an ASCII or UTF-8 encoded plain text file. View the rule update log for error details.
May I know anyone face this issue and how do we resolve it.
05-06-2016 12:40 AM
What version of Firesight are you using, and what version is the sensor running?
05-06-2016 12:54 AM
Hi,
Could you check if custom variables are added to default set , if not add them to default set and try to import the rule again.
Also, it could be related to a known issue reported in bug CSCze95186 which reports the same error.
Rate if it helps.
Thanks,
Ankita
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: