This article describes the use of an XLSX spreadsheet to import assets into Prism.

Background

In most use-cases, when vulnerability data is imported into Prism, the data contains the sufficient asset attribution of a vulnerability meaning Prism will compile and maintain an asset database that contain asset information taken from vulnerability scanning data.

There may be circumstances where assets need to be imported to Prism outside of vulnerability data. This import feature enables both new assets to be created and existing assets to be enriched with meta data such as system ownership, technical ownership, priority rating, or asset value.

Importing Assets

From the main “Assets” page in Prism, the “Import Assets” button in the top-right is available:

Downloading Asset Import Spreadsheet Template

Prism provides a pre-formatted XLSX spreadsheet that can be downloaded and use as a template for populating assets from other out-of-platform sources. This can be downloaded as a JSON or XLSX file under the “Import Assets” screen:

The resulting XLSX file has multiple columns populated into which asset information can be populated:

Populating Asset Information into Spreadsheet Template

The Spreadsheet template contains both mandatory and optional columns that must be populated with valid data for Prism to successfully import.

In certain columns, the data entered should reflect configuration already in Prism before attempting to import. This is detailed below against the relevant field(s)

Mandatory Fields/Columns

The following Columns must be populated:

• At least one of the following fields must be populated:

  • IP Address - in a.b.c.d notation. Do not include any subnet mask or CIDR notation

  • Name - this is a text-based field that may also contain hyphens ('-')

  • Hostname - this is a text-based field that may also contain dots ('.') and hyphens ('-')

• Company - this is a text based field. This should be the name of the company to which the asset is associated. This must be the name of a company that already exists in Prism prior to attempting the asset import. The Company field must exactly match the name of the company in the Prism tenant

Optional Fields/Columns

The following columns can be optionally populated:

• Priority Rating - this must be an integer between 1 and 10

• Operating System - this is a text-based field

• Location - this is a text-based field that describes any location-specific information

• Asset Value - this is a text-based field - for example, an asset valued at £100 would be entered as 100.00

• System Owner - this must be the email address of an existing user in Prism.

• Technical Owner - this must be the email address of an existing user in Prism.

• Notes - this is a text-based field that can contain any relevant notes/comments for the asset

• Tags - this is a text-based field that can support multiple tag values separated by a comma. Tags must already exist in Prism prior to attempting the asset import

Once the spreadsheet has been populated with rows of assets, please check that all mandatory fields have values entered. Also confirm that, where used, references to existing data in Prism have been satisfied - such as when adding a Technical Owner - that the entry already exists as a user in Prism

Performing Asset Import

Use the “Choose File” link under “Import Assets” to load the spreadsheet containing assets. Drag and Drop of the XLSX file is also supported:

Reviewing Assets before Import

If the format of the data in the supplied spreadsheet template is valid, Prism will pre-load the assets into the “Import Assets” main table for review:

Completing Import

All or a subset of the assets can be selected using the tick-box on the left-side of the table. Then the “Save Import” button will complete the import into the asset database.