EDR: "Report from 'feed_name' has non-string 'id' field"

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

• Custom feed is not importing and the following error is seen in the enterprise.log

  "Report from 'feed_name' has non-string 'id' field"

Environment

• EDR Server: 7.7.3 and below
• Feeds

Cause

Report "id" field is an integer instead of a string

Resolution

1. Update the feed report's id to be surrounded in quotes.

   "id": 70
   to
   "id": "70"

2. Upgrade to 7.8.0. In this version, it will automatically convert these int's into strings. 

Additional Information

• 7.8.0 is scheduled to release at the end of March.